last executing test programs:

21m51.68179929s ago: executing program 2 (id=114):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x3ff, 0x200010, 0x1, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0)
fcntl$dupfd(r2, 0x406, r1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

21m51.090166549s ago: executing program 4 (id=117):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

21m51.000558388s ago: executing program 2 (id=118):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r0, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)

21m50.684162536s ago: executing program 4 (id=119):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xa}}]}}]}, 0x40}}, 0x800)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4)

21m50.554695859s ago: executing program 2 (id=120):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

21m50.280167776s ago: executing program 2 (id=122):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r2, r2, 0xd, 0x0, 0x0, 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@none, 0x1})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000240)={r3, r3, 0x4, 0x7, &(0x7f00000001c0)="afe5c64e4a103f", 0xc0, 0x4, 0x9c3f, 0x6, 0x5, 0x2, 0x7, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

21m49.235040404s ago: executing program 4 (id=125):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)

21m49.083200955s ago: executing program 4 (id=126):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x84, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff20000000007e000aac14140ce000000d49e832f0", 0x0, 0xf, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

21m48.941327398s ago: executing program 4 (id=128):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r7, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)
sendto$packet(r8, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r7, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

21m48.741382956s ago: executing program 2 (id=131):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x80, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffebb, &(0x7f0000000180), 0x5}, 0x20000800)

21m47.104846318s ago: executing program 2 (id=135):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xa}}]}}]}, 0x40}}, 0x800)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4)

21m46.30314194s ago: executing program 3 (id=138):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x84, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff20000000007e000aac14140ce000000d49e832f0", 0x0, 0xf, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

21m46.164356993s ago: executing program 3 (id=139):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a6970"], 0x60}}, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

21m44.73897331s ago: executing program 3 (id=140):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)

21m44.513031287s ago: executing program 4 (id=141):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv4_newnexthop={0x1c, 0x5e, 0xa25, 0x400, 0x25dfdbfe, {0x2, 0x0, 0x4}, [@NHA_FDB={0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

21m44.38631643s ago: executing program 3 (id=142):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r0, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)

21m44.146390189s ago: executing program 3 (id=143):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

21m43.982098946s ago: executing program 3 (id=144):
r0 = socket$packet(0x11, 0x2, 0x300)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x8, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x5d}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000", @ANYRES16=r3], 0xfdef)

21m31.887298017s ago: executing program 32 (id=135):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xa}}]}}]}, 0x40}}, 0x800)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4)

21m29.383506846s ago: executing program 33 (id=141):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv4_newnexthop={0x1c, 0x5e, 0xa25, 0x400, 0x25dfdbfe, {0x2, 0x0, 0x4}, [@NHA_FDB={0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

21m28.889542085s ago: executing program 34 (id=144):
r0 = socket$packet(0x11, 0x2, 0x300)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x8, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x5d}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000", @ANYRES16=r3], 0xfdef)

12m51.817079971s ago: executing program 0 (id=1801):
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0)

12m48.041326356s ago: executing program 0 (id=1803):
r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x408, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r2, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101000)
ioctl$NBD_DO_IT(r3, 0xab03)

12m47.4261248s ago: executing program 0 (id=1805):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08092320"], 0xb)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffa}, 0xe)
bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c010000100031082bbd700800000000ac1414aa000000000000000000000000e00000010000000000000000000000000000ecdf000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000002b000000ac1414aa000000010000000000000000fefffffffffffffffeffffffffffffff0000000000000000000000000000000000000000000000007f00000000000000000000000000000000000000000000084000"/117], 0x13c}}, 0x4050)
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0)

12m47.184718989s ago: executing program 0 (id=1807):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_newaddr={0x11, 0x14, 0xca1}, 0x18}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

12m46.253542183s ago: executing program 0 (id=1810):
syz_open_dev$vim2m(&(0x7f0000000100), 0xffffffffffffffff, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f00000000c0)={0x1, 0x14, 0x2, 0x6, 0x3, 0x7})
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
chdir(0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5)

12m44.36136946s ago: executing program 0 (id=1812):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x200008c0)

12m28.951565878s ago: executing program 35 (id=1812):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x200008c0)

3m49.858900929s ago: executing program 8 (id=3262):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24004001}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6)
ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800})
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmsg$rds(r4, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0xfd83}], 0x1, 0x0, 0x0, 0x8000}, 0x48004)
poll(&(0x7f00000000c0), 0x0, 0x6)
socket(0x2a, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r5 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3m47.895450136s ago: executing program 8 (id=3264):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x404400, 0x192)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x23, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da64412"})
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc020000000000000000"], 0x10c}}, 0x0)
r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000640)=0x10)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r7, 0x0)

3m46.44204325s ago: executing program 8 (id=3267):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x404400, 0x192)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)})
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc020000000000000000"], 0x10c}}, 0x0)
r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000640)=0x10)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r7, 0x0)

3m44.714826761s ago: executing program 8 (id=3273):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, 0x0, 0x0)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
memfd_secret(0x80000)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000080), 0x2204803, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x940, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
accept4$unix(r0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023896)

3m43.666171321s ago: executing program 8 (id=3277):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000900)=r3, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x60, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0xc5}, 0xc010)

3m42.226393027s ago: executing program 8 (id=3281):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000000)=@ethtool_cmd={0x48, 0x0, 0x1, 0xd, 0x5, 0x75, 0x8, 0x0, 0xdc, 0x0, 0x100, 0x80000000, 0x6, 0xd, 0x8, 0xaed, [0x3, 0x7]}})
rmdir(&(0x7f0000000380)='./file0/../file0\x00')

3m25.626162569s ago: executing program 36 (id=3281):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000000)=@ethtool_cmd={0x48, 0x0, 0x1, 0xd, 0x5, 0x75, 0x8, 0x0, 0xdc, 0x0, 0x100, 0x80000000, 0x6, 0xd, 0x8, 0xaed, [0x3, 0x7]}})
rmdir(&(0x7f0000000380)='./file0/../file0\x00')

27.082323265s ago: executing program 6 (id=3740):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff00", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018"], 0x48}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x24, 0x0, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0)
openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8)
syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4}, 0xc)
sendmmsg$alg(r0, 0x0, 0x0, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)

26.138486033s ago: executing program 6 (id=3744):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20)

25.897819026s ago: executing program 6 (id=3745):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x2000c080)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001b80)={0x2f})

24.228000907s ago: executing program 6 (id=3749):
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x106, 0x5}}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x1, 0x84)
semctl$IPC_INFO(0x0, 0x2, 0x3, 0x0)

23.390718163s ago: executing program 6 (id=3753):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, 0x0, 0x0, 0x0)

21.641701069s ago: executing program 6 (id=3755):
syz_io_uring_setup(0x78ae, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x148}, &(0x7f0000000080), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xa081, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff8105", 0x18}], 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x10000800040068], 0xd000, 0x80})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14.760914556s ago: executing program 1 (id=3773):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
timer_create(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
write$nci(0xffffffffffffffff, 0x0, 0x132)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)={0x18, r2, 0x301, 0x70bd2d, 0x25dfdbfc, {0x24}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x6f8834644824d9b4)

13.434504632s ago: executing program 9 (id=3776):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3)
mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000200)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\x96\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x1dc3\xca\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<')
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20000050)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x25dfdbfc, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x44080)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00')
read$FUSE(r6, &(0x7f0000002380)={0x2020}, 0x2020)

11.685449936s ago: executing program 9 (id=3778):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)="bc", 0x1}], 0x1)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
dup2(r1, r0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

11.054820585s ago: executing program 5 (id=3779):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10.521429281s ago: executing program 5 (id=3781):
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$cgroup_int(r0, 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)

9.250524056s ago: executing program 1 (id=3785):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf09010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x2000)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x90000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x1d3, 0x4})
ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f00000000c0)={"0deb2f09c46ea1a25056060b852a7e3fe040df8ea9244f8aff1c55876afd", 0xffffffff, 0x2, 0x0, 0x6, 0x99, 0x8, 0x389, 0x0, [0x9, 0xb, 0x8, 0x2, 0xacf, 0x6, 0x5, 0x8e4, 0x7, 0x3, 0x1, 0x7f, 0x2, 0x8, 0x4, 0xfffff000, 0x7fffffff, 0x8]})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
r6 = fanotify_init(0x200, 0x0)
fanotify_mark(r6, 0x1, 0x1033, r5, 0x0)
pipe2(&(0x7f00000012c0)={<r7=>0xffffffffffffffff}, 0x0)
tee(r7, r5, 0xe, 0x4)
r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

7.844841794s ago: executing program 5 (id=3788):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}}, 0x1)
sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/152, 0x98, 0x1, 0x0}, &(0x7f0000000180)=0x40)

7.525528203s ago: executing program 9 (id=3789):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000400)={'fscrypt:', @auto=[0x61, 0x65, 0x37, 0x6a35d6415f0c9bcc, 0x65, 0x0, 0x62, 0x65, 0x63, 0x61, 0x61, 0x39, 0x35, 0x64, 0x62, 0x63]}, &(0x7f00000005c0)={0x0, "77ca1fea949ae6e192e1efd406f3f959ba523f2f1e27246ef3eb83c8cded5c9ab3c164a194ff37c695070816854f1bfd8754bd3cd6cb3275df616e903ae269c1", 0x36}, 0x48, 0xfffffffffffffffb)
keyctl$assume_authority(0x10, r3)

6.886546922s ago: executing program 5 (id=3790):
syz_emit_ethernet(0x6e, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44)
sendmsg$sock(r2, 0x0, 0x0)
sendmsg$sock(r2, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000090601090000000000000000000000000900"], 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4814)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_usb_connect(0x4, 0x2d, &(0x7f0000001080)=ANY=[@ANYRES64], 0x0)
alarm(0x64)
alarm(0x7fffffff)

6.210051013s ago: executing program 9 (id=3791):
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
close(0x3)

6.003033778s ago: executing program 7 (id=3792):
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

5.895788093s ago: executing program 1 (id=3793):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000))

5.835541223s ago: executing program 9 (id=3794):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}]})
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0)

5.658195097s ago: executing program 7 (id=3795):
socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x4, &(0x7f0000000300)=[{0x2, 0x7, 0x95, 0x4584}, {0x0, 0xf, 0x36, 0x7fff}, {0x0, 0x4a, 0x4, 0xd649}, {0x6, 0x78, 0x2, 0x401}]})
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="010000000300000000000000000000000800030011000000f02ffe9ec85fa5769442fddca420151904df28cf570c9571a9c43a52fbd3fd7253938a15b43b4a91dc36cb01dbbd3a5f35f9eaa1bbed44fa23987073aa524c1c2f1aea7d46317f4ed1a28f0abf59d57fad5b474ec47a4af94f482a438eca44cc1d8f32452b97b84fd3c2", @ANYRES8=r2], 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b01"], 0x0)

5.57557312s ago: executing program 1 (id=3796):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x106, 0x5}}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x1, 0x84)
semctl$IPC_INFO(0x0, 0x2, 0x3, 0x0)

5.500347323s ago: executing program 9 (id=3797):
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$cgroup_int(r0, 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)

5.226178089s ago: executing program 5 (id=3798):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)="bc", 0x1}], 0x1)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
dup2(r1, r0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

3.270371498s ago: executing program 1 (id=3799):
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x8040)
readv(r2, &(0x7f0000001300)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffd, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)='\b\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x0, 0x0})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

1.760047262s ago: executing program 7 (id=3800):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000400)={'fscrypt:', @auto=[0x61, 0x65, 0x37, 0x6a35d6415f0c9bcc, 0x65, 0x0, 0x62, 0x65, 0x63, 0x61, 0x61, 0x39, 0x35, 0x64, 0x62, 0x63]}, &(0x7f00000005c0)={0x0, "77ca1fea949ae6e192e1efd406f3f959ba523f2f1e27246ef3eb83c8cded5c9ab3c164a194ff37c695070816854f1bfd8754bd3cd6cb3275df616e903ae269c1", 0x36}, 0x48, 0xfffffffffffffffb)
keyctl$assume_authority(0x10, r3)

1.681245903s ago: executing program 1 (id=3801):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)
r3 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000e40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000800}], 0x1, 0x20004050)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0))
close_range(r4, 0xffffffffffffffff, 0x0)

1.421269649s ago: executing program 5 (id=3802):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf09010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x2000)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x90000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x1d3, 0x4})
ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f00000000c0)={"0deb2f09c46ea1a25056060b852a7e3fe040df8ea9244f8aff1c55876afd", 0xffffffff, 0x2, 0x0, 0x6, 0x99, 0x8, 0x389, 0x0, [0x9, 0xb, 0x8, 0x2, 0xacf, 0x6, 0x5, 0x8e4, 0x7, 0x3, 0x1, 0x7f, 0x2, 0x8, 0x4, 0xfffff000, 0x7fffffff, 0x8]})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
r6 = fanotify_init(0x200, 0x0)
fanotify_mark(r6, 0x1, 0x1033, r5, 0x0)
pipe2(&(0x7f00000012c0)={<r7=>0xffffffffffffffff}, 0x0)
tee(r7, r5, 0xe, 0x4)
r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

691.271327ms ago: executing program 7 (id=3803):
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
close(0x3)

261.529427ms ago: executing program 7 (id=3804):
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

0s ago: executing program 7 (id=3805):
mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0)
rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000001900)='./file0\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40)

kernel console output (not intermixed with test programs):

d
[ 1086.126979][  T674] team0 (unregistering): Port device team_slave_0 removed
[ 1087.886986][T12472] usb 9-1: new full-speed USB device number 23 using dummy_hcd
[ 1088.060602][T12472] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1088.060634][T12472] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1088.060654][T12472] usb 9-1: Product: syz
[ 1088.060668][T12472] usb 9-1: Manufacturer: syz
[ 1088.060681][T12472] usb 9-1: SerialNumber: syz
[ 1088.124806][T12472] usb 9-1: config 0 descriptor??
[ 1088.339440][T12472] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1088.960249][T12472] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1090.598130][T14388] usb 9-1: USB disconnect, device number 23
[ 1090.720415][  T674] IPVS: stop unused estimator thread 0...
[ 1091.902054][T15265] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1091.987258][T15265] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1092.192093][T15265] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1092.420630][T15817] binder: 15816:15817 ioctl 4018620d 0 returned -22
[ 1092.728555][T15265] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1093.069281][T15265] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1093.135423][T15265] 8021q: adding VLAN 0 to HW filter on device team0
[ 1093.175003][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1093.175111][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1093.203368][  T115] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1093.203596][  T115] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1094.770469][ T5803] Bluetooth: hci2: unexpected event for opcode 0x2023
[ 1094.819398][T15884] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2884'.
[ 1095.420513][T15265] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1095.738734][T15265] veth0_vlan: entered promiscuous mode
[ 1095.825584][T15265] veth1_vlan: entered promiscuous mode
[ 1096.898846][T15265] veth0_macvtap: entered promiscuous mode
[ 1096.934362][T15265] veth1_macvtap: entered promiscuous mode
[ 1096.993848][T15265] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1097.040264][T15265] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1097.073654][  T674] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1097.085155][  T674] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1097.087248][  T674] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1097.087297][  T674] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1098.491561][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1098.491588][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1098.903330][  T674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1098.903355][  T674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1100.574138][T16000] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2926'.
[ 1102.711568][T16013] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1103.988421][ T8474] usb 7-1: new full-speed USB device number 39 using dummy_hcd
[ 1104.374388][ T8474] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1104.374423][ T8474] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1104.374444][ T8474] usb 7-1: Product: syz
[ 1104.374459][ T8474] usb 7-1: Manufacturer: syz
[ 1104.374474][ T8474] usb 7-1: SerialNumber: syz
[ 1104.393293][ T8474] usb 7-1: config 0 descriptor??
[ 1104.657849][ T8474] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1104.860173][ T8474] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1106.662253][T12472] usb 7-1: USB disconnect, device number 39
[ 1107.104071][T14410] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[ 1107.254188][T14410] usb 7-1: Using ep0 maxpacket: 16
[ 1107.258544][T14410] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1107.258572][T14410] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1107.258587][T14410] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1107.258601][T14410] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1107.260034][T14410] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1107.260054][T14410] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1107.260070][T14410] usb 7-1: Manufacturer: syz
[ 1107.286531][T14410] usb 7-1: config 0 descriptor??
[ 1107.775748][T14410] rc_core: IR keymap rc-hauppauge not found
[ 1107.775774][T14410] Registered IR keymap rc-empty
[ 1107.777528][T14410] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1107.794244][T14410] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1107.823417][T14410] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[ 1107.827426][T14410] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input20
[ 1107.954862][T14410] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1107.974551][T14410] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1107.995048][T14410] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1108.014183][T14410] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1108.034369][T14410] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1108.054332][T14410] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1108.074199][T14410] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1108.094204][T14410] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1108.114126][T14410] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1108.134149][T14410] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1108.275370][T14410] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1108.275389][T14410] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1108.311007][T14410] usb 7-1: USB disconnect, device number 40
[ 1110.054273][ T5803] Bluetooth: hci2: unexpected event for opcode 0x2023
[ 1116.524844][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.524939][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1118.988345][ T8496] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1119.074832][T12472] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[ 1119.155025][ T8496] usb 2-1: Using ep0 maxpacket: 32
[ 1119.157792][ T8496] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1119.161728][ T8496] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[ 1119.161761][ T8496] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1119.161782][ T8496] usb 2-1: Product: syz
[ 1119.161797][ T8496] usb 2-1: Manufacturer: syz
[ 1119.161812][ T8496] usb 2-1: SerialNumber: syz
[ 1119.241144][ T8496] usb 2-1: config 0 descriptor??
[ 1119.244112][T12472] usb 9-1: Using ep0 maxpacket: 8
[ 1119.268485][T12472] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1119.268518][T12472] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1119.268539][T12472] usb 9-1: Product: syz
[ 1119.268555][T12472] usb 9-1: Manufacturer: syz
[ 1119.268570][T12472] usb 9-1: SerialNumber: syz
[ 1119.346103][T12472] usb 9-1: config 0 descriptor??
[ 1119.428049][ T8496] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1119.606106][T12472] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1119.818187][T12472] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1119.890799][T12472] usb 9-1: USB disconnect, device number 24
[ 1120.003567][   T13] usb 2-1: Failed to submit usb control message: -71
[ 1120.003606][   T13] usb 2-1: unable to send the bmi data to the device: -71
[ 1120.003624][   T13] usb 2-1: unable to get target info from device
[ 1120.003639][   T13] usb 2-1: could not get target info (-71)
[ 1120.003657][   T13] usb 2-1: could not probe fw (-71)
[ 1120.049079][ T8496] usb 2-1: USB disconnect, device number 48
[ 1124.473780][T12260] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1124.507981][T12260] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1124.509661][T12260] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1124.511311][T12260] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1124.512450][T12260] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1126.634655][ T5803] Bluetooth: hci0: command tx timeout
[ 1127.150347][T16322] wlan1 speed is unknown, defaulting to 1000
[ 1127.170796][T16322] lo speed is unknown, defaulting to 1000
[ 1128.265823][T16322] chnl_net:caif_netlink_parms(): no params data found
[ 1128.404056][T12472] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[ 1128.540300][T16322] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1128.540547][T16322] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1128.540759][T16322] bridge_slave_0: entered allmulticast mode
[ 1128.543678][T16322] bridge_slave_0: entered promiscuous mode
[ 1128.548958][T16322] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1128.549191][T16322] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1128.549389][T16322] bridge_slave_1: entered allmulticast mode
[ 1128.552254][T16322] bridge_slave_1: entered promiscuous mode
[ 1128.654629][T12472] usb 9-1: Using ep0 maxpacket: 8
[ 1128.657589][T12472] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[ 1128.657619][T12472] usb 9-1: config 179 has no interface number 0
[ 1128.657670][T12472] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1128.657699][T12472] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1128.657729][T12472] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1128.657757][T12472] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1128.657785][T12472] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1128.657829][T12472] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1128.657852][T12472] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1128.664680][ T5803] Bluetooth: hci0: command tx timeout
[ 1128.785793][T16374] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1129.029373][T16322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1129.102470][T16322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1129.254241][    C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1129.254254][ T8474] usb 9-1: USB disconnect, device number 25
[ 1129.254327][    C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1129.952095][T16322] team0: Port device team_slave_0 added
[ 1129.968234][T16322] team0: Port device team_slave_1 added
[ 1130.737378][T16322] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1130.737399][T16322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1130.737424][T16322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1130.758883][ T5803] Bluetooth: hci0: command tx timeout
[ 1131.027008][T16322] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1131.027030][T16322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1131.027172][T16322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1132.101080][ T5803] Bluetooth: hci2: Malformed MSFT vendor event: 0x02
[ 1132.203540][T16322] hsr_slave_0: entered promiscuous mode
[ 1132.232005][T16322] hsr_slave_1: entered promiscuous mode
[ 1132.233036][T16322] debugfs: 'hsr0' already exists in 'hsr'
[ 1132.233063][T16322] Cannot create hsr debugfs directory
[ 1132.835151][ T5803] Bluetooth: hci0: command tx timeout
[ 1133.615460][T14388] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1133.764132][T14388] usb 2-1: Using ep0 maxpacket: 8
[ 1133.767005][T14388] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[ 1133.767034][T14388] usb 2-1: config 179 has no interface number 0
[ 1133.767096][T14388] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1133.767123][T14388] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1133.767154][T14388] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1133.767181][T14388] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1133.767209][T14388] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1133.767256][T14388] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1133.767281][T14388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1133.897252][T16427] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1134.680853][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1134.680928][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1134.680994][T14388] usb 2-1: USB disconnect, device number 49
[ 1134.910325][T16458] affs: No valid root block on device nullb0
[ 1135.395797][T16322] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1136.064023][T12472] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[ 1136.115028][T16322] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1136.234059][T12472] usb 7-1: Using ep0 maxpacket: 16
[ 1136.236168][T12472] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1136.236195][T12472] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1136.238864][T12472] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1136.238893][T12472] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1136.238913][T12472] usb 7-1: Product: syz
[ 1136.238928][T12472] usb 7-1: Manufacturer: syz
[ 1136.238943][T12472] usb 7-1: SerialNumber: syz
[ 1136.572428][T12472] usb 7-1: 0:2 : does not exist
[ 1136.850644][T12472] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[ 1137.246030][T16322] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1137.341750][T12472] usb 7-1: USB disconnect, device number 41
[ 1137.471077][T15325] udevd[15325]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1137.893225][T16322] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1139.254110][ T8483] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[ 1139.354101][ T8496] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[ 1139.427828][ T8483] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1139.427859][ T8483] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1139.427906][ T8483] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 1139.427930][ T8483] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1139.490437][ T8483] usb 7-1: config 0 descriptor??
[ 1139.611023][ T8496] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1139.611045][ T8496] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1139.611058][ T8496] usb 2-1: Product: syz
[ 1139.611066][ T8496] usb 2-1: Manufacturer: syz
[ 1139.611075][ T8496] usb 2-1: SerialNumber: syz
[ 1139.651737][ T8496] usb 2-1: config 0 descriptor??
[ 1139.899299][ T8496] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1139.958029][T16322] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1140.048101][T16322] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1140.125983][T16322] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1140.185041][T16322] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1140.910368][T16322] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1141.697475][T16322] 8021q: adding VLAN 0 to HW filter on device team0
[ 1141.758270][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1141.759093][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1141.911442][T10387] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1141.913701][T10387] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1142.086319][ T8496] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1142.884111][T12472] usb 2-1: USB disconnect, device number 50
[ 1143.011803][ T8474] usb 7-1: USB disconnect, device number 42
[ 1144.094183][ T8474] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[ 1144.246602][ T8474] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1144.246654][ T8474] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1144.246683][ T8474] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1144.246707][ T8474] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1144.248376][ T8474] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1144.248407][ T8474] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1144.248428][ T8474] usb 7-1: Manufacturer: syz
[ 1144.326383][ T8474] usb 7-1: config 0 descriptor??
[ 1144.762625][ T8474] usbhid 7-1:0.0: can't add hid device: -71
[ 1144.762744][ T8474] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1144.793242][ T8474] usb 7-1: USB disconnect, device number 43
[ 1145.213592][T16322] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1146.603620][T16322] veth0_vlan: entered promiscuous mode
[ 1146.643074][T16322] veth1_vlan: entered promiscuous mode
[ 1146.792701][T16322] veth0_macvtap: entered promiscuous mode
[ 1146.826181][T16322] veth1_macvtap: entered promiscuous mode
[ 1146.855469][T16322] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1146.876871][T16322] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1146.917366][T10375] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1146.918446][T10375] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1146.920893][T10375] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1146.921059][T10375] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1148.195028][T10375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1148.195044][T10375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1148.340481][ T1357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1148.340506][ T1357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1149.028422][T16688] binder: 16681:16688 ioctl 4018620d 0 returned -22
[ 1149.080605][T16689] binder: 16681:16689 ioctl c0306201 0 returned -14
[ 1152.001268][T12260] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1152.019448][T12260] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1152.023207][T12260] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1152.055271][T12260] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1152.057777][T12260] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1152.841458][ T8496] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[ 1153.012723][ T8496] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1153.012777][ T8496] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1153.012804][ T8496] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1153.012827][ T8496] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1153.015151][ T8496] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1153.015182][ T8496] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1153.015202][ T8496] usb 8-1: Manufacturer: syz
[ 1153.122303][ T8496] usb 8-1: config 0 descriptor??
[ 1153.509346][T16721] wlan1 speed is unknown, defaulting to 1000
[ 1153.565655][T16721] lo speed is unknown, defaulting to 1000
[ 1153.601371][ T8496] usbhid 8-1:0.0: can't add hid device: -71
[ 1153.601509][ T8496] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1153.633322][ T8496] usb 8-1: USB disconnect, device number 39
[ 1154.183397][T16744] binder: 16741:16744 ioctl 4018620d 0 returned -22
[ 1154.184544][ T5803] Bluetooth: hci1: command tx timeout
[ 1154.236193][T16745] binder: 16741:16745 ioctl c0306201 0 returned -14
[ 1154.436458][ T5803] Bluetooth: hci5: command 0x0406 tx timeout
[ 1156.264171][T12260] Bluetooth: hci1: command tx timeout
[ 1158.426105][T12260] Bluetooth: hci1: command tx timeout
[ 1160.560328][T12260] Bluetooth: hci1: command tx timeout
[ 1160.874725][T14408] usb 8-1: new high-speed USB device number 40 using dummy_hcd
[ 1160.964408][T16721] chnl_net:caif_netlink_parms(): no params data found
[ 1161.056513][T14408] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1161.056568][T14408] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1161.056596][T14408] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1161.056621][T14408] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1161.058250][T14408] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1161.058280][T14408] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1161.058302][T14408] usb 8-1: Manufacturer: syz
[ 1161.159194][T14408] usb 8-1: config 0 descriptor??
[ 1161.643724][T14408] usbhid 8-1:0.0: can't add hid device: -71
[ 1161.644022][T14408] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1161.660454][T14408] usb 8-1: USB disconnect, device number 40
[ 1162.348972][T16721] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1162.349711][T16721] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1162.350007][T16721] bridge_slave_0: entered allmulticast mode
[ 1162.353288][T16721] bridge_slave_0: entered promiscuous mode
[ 1162.441326][T16721] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1162.441483][T16721] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1162.441687][T16721] bridge_slave_1: entered allmulticast mode
[ 1162.470141][T16721] bridge_slave_1: entered promiscuous mode
[ 1162.730421][T16721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1162.772762][T16721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1162.858124][  T115] bridge_slave_1: left allmulticast mode
[ 1162.858230][  T115] bridge_slave_1: left promiscuous mode
[ 1162.858890][  T115] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1163.005898][  T115] bridge_slave_0: left allmulticast mode
[ 1163.005932][  T115] bridge_slave_0: left promiscuous mode
[ 1163.006254][  T115] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1164.395627][T16848] binder: 16846:16848 ioctl 4018620d 0 returned -22
[ 1164.449251][T16849] binder: 16846:16849 ioctl c0306201 0 returned -14
[ 1167.076066][  T115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1167.187697][  T115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1167.284934][  T115] bond0 (unregistering): Released all slaves
[ 1167.376752][T16721] team0: Port device team_slave_0 added
[ 1167.600851][T16721] team0: Port device team_slave_1 added
[ 1167.855177][T16721] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1167.855197][T16721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1167.855223][T16721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1167.858074][T16721] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1167.858092][T16721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1167.858123][T16721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1170.191257][T16877] macvlan0: entered promiscuous mode
[ 1170.194951][T16877] macvlan0: entered allmulticast mode
[ 1170.194971][T16877] veth1_vlan: entered allmulticast mode
[ 1170.389849][T16721] hsr_slave_0: entered promiscuous mode
[ 1170.391343][T16721] hsr_slave_1: entered promiscuous mode
[ 1170.393264][T16721] debugfs: 'hsr0' already exists in 'hsr'
[ 1170.393324][T16721] Cannot create hsr debugfs directory
[ 1170.777672][T16893] binder: 16888:16893 ioctl 4018620d 0 returned -22
[ 1171.182720][T12472] usb 8-1: new high-speed USB device number 41 using dummy_hcd
[ 1171.532720][T12472] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1171.532787][T12472] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1171.532825][T12472] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1171.532885][T12472] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1171.708794][T12472] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1171.708954][T12472] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1171.709091][T12472] usb 8-1: Manufacturer: syz
[ 1171.835586][T12472] usb 8-1: config 0 descriptor??
[ 1174.790499][T12472] usbhid 8-1:0.0: can't add hid device: -71
[ 1174.793366][T12472] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1175.615138][T12472] usb 8-1: USB disconnect, device number 41
[ 1176.448106][  T115] hsr_slave_0: left promiscuous mode
[ 1176.494144][T12472] usb 8-1: new high-speed USB device number 42 using dummy_hcd
[ 1176.564294][  T115] hsr_slave_1: left promiscuous mode
[ 1176.566413][  T115] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1176.605316][  T115] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1176.686700][T12472] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 1176.686742][T12472] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1176.744560][T12472] usb 8-1: config 0 descriptor??
[ 1177.041972][T16941] binder: 16938:16941 ioctl 4018620d 0 returned -22
[ 1177.953329][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.953425][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1179.119184][T16956] siw: device registration error -23
[ 1180.410782][ T5803] Bluetooth: hci3: command 0x0406 tx timeout
[ 1182.321242][  T115] team0 (unregistering): Port device team_slave_1 removed
[ 1182.448823][ T8496] usb 8-1: USB disconnect, device number 42
[ 1182.486227][  T115] team0 (unregistering): Port device team_slave_0 removed
[ 1184.824841][T16971] binder: 16969:16971 ioctl c0306201 0 returned -14
[ 1184.892182][T16972] binder: 16969:16972 ioctl c0306201 0 returned -14
[ 1184.901875][T16972] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3205'.
[ 1187.073211][T16961] random: crng reseeded on system resumption
[ 1188.345115][T16989] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.3209'.
[ 1189.140238][T16995] binder: 16990:16995 ioctl 4018620d 0 returned -22
[ 1190.551577][T17015] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1191.234951][T17016] binder: 17011:17016 ioctl c0306201 0 returned -14
[ 1191.287960][T17017] binder: 17011:17017 ioctl c0306201 0 returned -14
[ 1191.288501][T17017] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3216'.
[ 1191.842071][T17022] binder: 17018:17022 ioctl c0306201 0 returned -14
[ 1191.859971][T17022] binder: 17018:17022 ioctl 4018620d 0 returned -22
[ 1191.935844][T17023] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3217'.
[ 1193.915939][T17032] netlink: 212360 bytes leftover after parsing attributes in process `syz.7.3220'.
[ 1194.559373][  T115] IPVS: stop unused estimator thread 0...
[ 1196.283090][T17061] binder: 17058:17061 ioctl c0306201 0 returned -14
[ 1196.337125][T17062] binder: 17058:17062 ioctl c0306201 0 returned -14
[ 1196.344945][T17062] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3227'.
[ 1197.246285][T16721] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1198.261910][T17073] binder: 17066:17073 ioctl c0306201 0 returned -14
[ 1198.271276][T17073] binder: 17066:17073 ioctl 4018620d 0 returned -22
[ 1198.346340][T17074] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3229'.
[ 1198.524075][T16721] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1199.191145][T16721] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1199.299086][T16721] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1200.147493][T17092] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1201.243821][T16721] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1201.412131][T16721] 8021q: adding VLAN 0 to HW filter on device team0
[ 1201.452721][T10387] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1201.452817][T10387] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1201.501182][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1201.501314][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1206.502432][T17129] binder: 17123:17129 ioctl c0306201 0 returned -14
[ 1206.524935][T17129] binder: 17123:17129 ioctl 4018620d 0 returned -22
[ 1206.585047][T17132] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3241'.
[ 1207.505662][T14410] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 1207.656881][T14410] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1207.656933][T14410] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 1207.656958][T14410] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1207.666331][T14410] usb 7-1: config 0 descriptor??
[ 1207.811837][T17146] binder: 17142:17146 ioctl c0306201 0 returned -14
[ 1207.866084][T17148] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3245'.
[ 1209.617524][T16721] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1210.906072][ T8483] usb 7-1: USB disconnect, device number 44
[ 1213.058045][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1213.205518][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1213.885957][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1214.128919][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1214.130211][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1214.471726][T17182] wlan1 speed is unknown, defaulting to 1000
[ 1214.518774][T17182] lo speed is unknown, defaulting to 1000
[ 1214.537166][T14411] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 1214.572526][T17175] /dev/nullb0: Can't open blockdev
[ 1214.667524][T17197] binder: 17193:17197 ioctl c0306201 0 returned -14
[ 1214.677915][T17197] binder: 17193:17197 ioctl 4018620d 0 returned -22
[ 1214.717582][T14411] usb 2-1: Using ep0 maxpacket: 16
[ 1214.756998][T17198] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3254'.
[ 1214.916949][T14411] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1214.917013][T14411] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1215.075654][T14411] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1215.075720][T14411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1215.075781][T14411] usb 2-1: Product: syz
[ 1215.075836][T14411] usb 2-1: Manufacturer: syz
[ 1215.076060][T14411] usb 2-1: SerialNumber: syz
[ 1215.730602][T14411] usb 2-1: 0:2 : does not exist
[ 1215.736255][T14411] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[ 1215.839006][T14411] usb 2-1: USB disconnect, device number 51
[ 1216.037664][T15325] udevd[15325]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1216.125454][T17205] binder: 17203:17205 ioctl c0306201 0 returned -14
[ 1216.188405][T17206] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3256'.
[ 1216.201177][T12260] Bluetooth: hci4: command tx timeout
[ 1218.270075][T12260] Bluetooth: hci4: command tx timeout
[ 1218.528078][T12472] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 1218.708959][T12472] usb 2-1: Using ep0 maxpacket: 32
[ 1218.735913][T12472] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 1218.735964][T12472] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1218.743143][T12472] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[ 1218.743174][T12472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1218.743194][T12472] usb 2-1: Product: syz
[ 1218.743208][T12472] usb 2-1: Manufacturer: syz
[ 1218.743223][T12472] usb 2-1: SerialNumber: syz
[ 1218.846033][T12472] usb 2-1: config 0 descriptor??
[ 1218.890523][T12472] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1219.858653][T10378] usb 2-1: Failed to submit usb control message: -71
[ 1219.858694][T10378] usb 2-1: unable to send the bmi data to the device: -71
[ 1219.858713][T10378] usb 2-1: unable to get target info from device
[ 1219.858729][T10378] usb 2-1: could not get target info (-71)
[ 1219.858748][T10378] usb 2-1: could not probe fw (-71)
[ 1219.866083][ T8474] usb 2-1: USB disconnect, device number 52
[ 1220.375905][T12260] Bluetooth: hci4: command tx timeout
[ 1221.801156][T17245] binder: 17241:17245 ioctl c0306201 0 returned -14
[ 1221.817914][T17245] binder: 17241:17245 ioctl 4018620d 0 returned -22
[ 1221.890489][T17247] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3264'.
[ 1222.424065][T12260] Bluetooth: hci4: command tx timeout
[ 1222.451337][T12260] Bluetooth: hci0: Malformed MSFT vendor event: 0x02
[ 1222.565314][T17244] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1222.786497][T17182] chnl_net:caif_netlink_parms(): no params data found
[ 1222.931626][T17256] binder: 17252:17256 ioctl c0306201 0 returned -14
[ 1222.985488][T17257] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3267'.
[ 1226.281786][T17283] binder: 17279:17283 ioctl c0306201 0 returned -14
[ 1226.299434][T17283] binder: 17279:17283 ioctl 4018620d 0 returned -22
[ 1226.373555][T17287] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3276'.
[ 1226.609084][T12260] Bluetooth: hci0: Malformed MSFT vendor event: 0x02
[ 1226.641367][T17182] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1226.641449][T17182] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1226.641590][T17182] bridge_slave_0: entered allmulticast mode
[ 1226.643216][T17182] bridge_slave_0: entered promiscuous mode
[ 1226.683669][T17182] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1226.683813][T17182] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1226.699014][T17182] bridge_slave_1: entered allmulticast mode
[ 1226.702088][T17182] bridge_slave_1: entered promiscuous mode
[ 1226.798249][T17290] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1226.875986][T17182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1226.876276][ T6080] bridge_slave_1: left allmulticast mode
[ 1226.876301][ T6080] bridge_slave_1: left promiscuous mode
[ 1226.876565][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1227.634978][ T6080] bridge_slave_0: left allmulticast mode
[ 1227.635010][ T6080] bridge_slave_0: left promiscuous mode
[ 1227.635304][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1231.640613][T17329] binder: 17325:17329 ioctl c0306201 0 returned -14
[ 1231.641503][T17329] binder: 17325:17329 ioctl 4018620d 0 returned -22
[ 1231.855294][T17331] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3290'.
[ 1232.614942][ T6080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1232.705770][T17338] binder: 17333:17338 ioctl c0306201 0 returned -14
[ 1232.769924][T17339] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3292'.
[ 1233.654884][ T6080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1233.760727][ T6080] bond0 (unregistering): Released all slaves
[ 1234.423730][T17182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1235.083137][ T6080] hsr_slave_0: left promiscuous mode
[ 1235.137257][ T6080] hsr_slave_1: left promiscuous mode
[ 1235.139599][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1235.228829][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1239.603011][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.603091][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.628678][T17387] binder: 17380:17387 ioctl c0306201 0 returned -14
[ 1239.638079][T17387] binder: 17380:17387 ioctl 4018620d 0 returned -22
[ 1239.717349][T17391] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3301'.
[ 1241.865425][ T6080] team0 (unregistering): Port device team_slave_1 removed
[ 1243.504929][ T6080] team0 (unregistering): Port device team_slave_0 removed
[ 1245.236903][T17416] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1245.323570][T17182] team0: Port device team_slave_0 added
[ 1245.435190][T17182] team0: Port device team_slave_1 added
[ 1245.837182][T17182] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1245.837201][T17182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1245.837223][T17182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1245.904610][T17182] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1245.904623][T17182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1245.904638][T17182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1246.053299][T17182] hsr_slave_0: entered promiscuous mode
[ 1246.061018][T17182] hsr_slave_1: entered promiscuous mode
[ 1246.404575][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1246.429122][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1246.450957][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1246.471939][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1246.482415][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1246.893148][T17443] binder: 17434:17443 ioctl c0306201 0 returned -14
[ 1246.934179][T17443] binder: 17434:17443 ioctl 4018620d 0 returned -22
[ 1247.164608][T17444] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3316'.
[ 1247.187372][T17442] ªªªªªª: renamed from vlan0
[ 1249.321875][T17427] wlan1 speed is unknown, defaulting to 1000
[ 1249.376853][T17427] lo speed is unknown, defaulting to 1000
[ 1249.414027][T12260] Bluetooth: hci1: command tx timeout
[ 1251.468737][T12260] Bluetooth: hci1: command tx timeout
[ 1252.684088][T17492] 9pnet_fd: Insufficient options for proto=fd
[ 1253.544988][T12260] Bluetooth: hci1: command tx timeout
[ 1255.679219][T12260] Bluetooth: hci1: command tx timeout
[ 1256.240557][T17427] chnl_net:caif_netlink_parms(): no params data found
[ 1257.750438][T17527] 9pnet_fd: Insufficient options for proto=fd
[ 1258.564264][T17526] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[ 1260.388544][T17542] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3345'.
[ 1260.990095][ T6080] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1261.321779][T17552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3348'.
[ 1261.458229][   T36] audit: type=1326 audit(1775066299.973:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17557 comm="syz.1.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887b36c819 code=0x7ffc0000
[ 1261.458287][   T36] audit: type=1326 audit(1775066299.973:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17557 comm="syz.1.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887b36c819 code=0x7ffc0000
[ 1261.476637][   T36] audit: type=1326 audit(1775066299.973:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17557 comm="syz.1.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f887b32d04e code=0x7ffc0000
[ 1261.476693][   T36] audit: type=1326 audit(1775066299.993:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17557 comm="syz.1.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f887b32d04e code=0x7ffc0000
[ 1261.476739][   T36] audit: type=1326 audit(1775066299.993:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17557 comm="syz.1.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887b36c819 code=0x7ffc0000
[ 1261.476779][   T36] audit: type=1326 audit(1775066299.993:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17557 comm="syz.1.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887b36c819 code=0x7ffc0000
[ 1261.477057][   T36] audit: type=1326 audit(1775066299.993:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17557 comm="syz.1.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f887b36c819 code=0x7ffc0000
[ 1261.477948][   T36] audit: type=1326 audit(1775066299.993:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17557 comm="syz.1.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887b36c819 code=0x7ffc0000
[ 1261.482039][   T36] audit: type=1326 audit(1775066299.993:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17557 comm="syz.1.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f887b36c819 code=0x7ffc0000
[ 1261.482314][   T36] audit: type=1326 audit(1775066299.993:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17557 comm="syz.1.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887b36c819 code=0x7ffc0000
[ 1262.958356][ T6080] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1263.652054][T17427] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1263.653375][T17427] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1263.654498][T17427] bridge_slave_0: entered allmulticast mode
[ 1263.657567][T17427] bridge_slave_0: entered promiscuous mode
[ 1263.737259][T17427] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1263.742956][T17427] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1263.743162][T17427] bridge_slave_1: entered allmulticast mode
[ 1263.746582][T17427] bridge_slave_1: entered promiscuous mode
[ 1264.924097][T14410] IPVS: starting estimator thread 0...
[ 1265.054165][T17578] IPVS: using max 7 ests per chain, 16800 per kthread
[ 1265.089819][T17582] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3357'.
[ 1265.715373][ T6080] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1265.879570][T17427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1266.482060][ T6080] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1266.538230][T17182] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1266.605052][T17427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1266.613390][T17182] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1266.798299][T17182] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1267.219543][T12260] Bluetooth: hci0: command 0x0406 tx timeout
[ 1267.344222][T17608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3364'.
[ 1267.385298][T17182] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1268.497623][T17427] team0: Port device team_slave_0 added
[ 1268.577319][T17427] team0: Port device team_slave_1 added
[ 1270.159773][T17427] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1270.159786][T17427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1270.159801][T17427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1270.307423][T17427] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1270.307436][T17427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1270.307452][T17427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1270.513163][T17636] Bluetooth: MGMT ver 1.23
[ 1270.521477][T17636] Bluetooth: hci0: invalid length 0, exp 2 for type 10
[ 1273.017762][T12260] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1273.034202][T12260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1273.038454][T12260] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1273.041371][T12260] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1273.042155][T12260] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1273.172216][T17668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3375'.
[ 1273.523169][ T6080] bond0 (unregistering): Released all slaves
[ 1273.639736][T17427] hsr_slave_0: entered promiscuous mode
[ 1273.643805][T17427] hsr_slave_1: entered promiscuous mode
[ 1273.646608][T17427] debugfs: 'hsr0' already exists in 'hsr'
[ 1273.646635][T17427] Cannot create hsr debugfs directory
[ 1275.147131][T12260] Bluetooth: hci5: command tx timeout
[ 1275.975970][T17663] wlan1 speed is unknown, defaulting to 1000
[ 1276.732342][T17663] lo speed is unknown, defaulting to 1000
[ 1277.224118][T12260] Bluetooth: hci5: command tx timeout
[ 1277.437377][T17732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3389'.
[ 1278.424290][T14410] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[ 1278.577323][T14410] usb 7-1: Using ep0 maxpacket: 8
[ 1278.595260][T14410] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[ 1278.595293][T14410] usb 7-1: config 179 has no interface number 0
[ 1278.595344][T14410] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1278.595373][T14410] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1278.595400][T14410] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1278.595431][T14410] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1278.595458][T14410] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1278.595507][T14410] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1278.595529][T14410] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1278.614295][T17742] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1278.938184][ T6080] hsr_slave_0: left promiscuous mode
[ 1278.994166][ T6080] hsr_slave_1: left promiscuous mode
[ 1279.088844][ T6127] usb 7-1: USB disconnect, device number 45
[ 1279.088846][    C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1279.088990][    C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1279.131067][ T6080] veth1_macvtap: left promiscuous mode
[ 1279.131166][ T6080] veth0_macvtap: left promiscuous mode
[ 1279.133431][ T6080] veth1_vlan: left allmulticast mode
[ 1279.133667][ T6080] veth1_vlan: left promiscuous mode
[ 1279.133782][ T6080] veth0_vlan: left promiscuous mode
[ 1279.304294][T12260] Bluetooth: hci5: command tx timeout
[ 1279.404354][T14410] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 1279.555816][T14410] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1279.555837][T14410] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1279.555849][T14410] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1279.555880][T14410] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1279.557366][T14410] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1279.557384][T14410] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1279.557396][T14410] usb 2-1: Product: syz
[ 1279.557405][T14410] usb 2-1: Manufacturer: syz
[ 1279.601897][T14410] cdc_wdm 2-1:1.0: skipping garbage
[ 1279.601922][T14410] cdc_wdm 2-1:1.0: skipping garbage
[ 1279.642611][T14410] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1279.642688][T14410] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1281.384029][T12260] Bluetooth: hci5: command tx timeout
[ 1282.240246][ T6127] usb 2-1: USB disconnect, device number 53
[ 1283.033620][ T8474] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[ 1283.086899][T17427] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1283.142200][T17427] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1283.208477][ T8474] usb 7-1: Using ep0 maxpacket: 8
[ 1283.211167][ T8474] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[ 1283.211196][ T8474] usb 7-1: config 179 has no interface number 0
[ 1283.211250][ T8474] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1283.211266][ T8474] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1283.211283][ T8474] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1283.211298][ T8474] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1283.211314][ T8474] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1283.211341][ T8474] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1283.211355][ T8474] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1283.240997][T17427] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1283.274134][T17799] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1283.518282][T17427] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1283.751773][T17663] chnl_net:caif_netlink_parms(): no params data found
[ 1283.948500][ T6127] usb 7-1: USB disconnect, device number 46
[ 1283.951503][    C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1283.951577][    C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1284.532406][T17663] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1284.532635][T17663] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1284.532902][T17663] bridge_slave_0: entered allmulticast mode
[ 1284.573790][T17663] bridge_slave_0: entered promiscuous mode
[ 1284.601036][T17663] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1284.601271][T17663] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1284.601573][T17663] bridge_slave_1: entered allmulticast mode
[ 1284.631343][T17663] bridge_slave_1: entered promiscuous mode
[ 1284.766538][T17663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1284.851664][T17663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1285.274822][T17842] overlayfs: failed to resolve './file1': -2
[ 1285.613289][T17663] team0: Port device team_slave_0 added
[ 1285.629118][ T8474] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 1285.653247][T17663] team0: Port device team_slave_1 added
[ 1285.776494][ T8474] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1285.776529][ T8474] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1285.776550][ T8474] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1285.776604][ T8474] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1285.779053][ T8474] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1285.779083][ T8474] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1285.779105][ T8474] usb 2-1: Product: syz
[ 1285.779120][ T8474] usb 2-1: Manufacturer: syz
[ 1285.867019][ T8474] cdc_wdm 2-1:1.0: skipping garbage
[ 1285.867045][ T8474] cdc_wdm 2-1:1.0: skipping garbage
[ 1285.886596][ T8474] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1285.886621][ T8474] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1286.596014][ T8474] usb 2-1: USB disconnect, device number 54
[ 1287.053552][T17663] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1287.053571][T17663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1287.053601][T17663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1287.426620][T17871] affs: No valid root block on device nullb0
[ 1288.015380][T17663] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1288.015398][T17663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1288.015429][T17663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1288.641567][T17663] hsr_slave_0: entered promiscuous mode
[ 1288.658497][T17663] hsr_slave_1: entered promiscuous mode
[ 1288.663260][T17663] debugfs: 'hsr0' already exists in 'hsr'
[ 1288.663289][T17663] Cannot create hsr debugfs directory
[ 1288.866388][T17427] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1290.888114][T17890] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[ 1292.073438][T17427] 8021q: adding VLAN 0 to HW filter on device team0
[ 1292.415420][ T6080] bridge_slave_1: left allmulticast mode
[ 1292.415455][ T6080] bridge_slave_1: left promiscuous mode
[ 1292.415744][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1292.556567][ T6080] bridge_slave_0: left allmulticast mode
[ 1292.556605][ T6080] bridge_slave_0: left promiscuous mode
[ 1292.556942][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1292.934013][ T8474] usb 8-1: new high-speed USB device number 43 using dummy_hcd
[ 1292.957084][T17904] affs: No valid root block on device nullb0
[ 1293.084116][ T8474] usb 8-1: Using ep0 maxpacket: 16
[ 1293.087054][ T8474] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1293.087093][ T8474] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1293.090369][ T8474] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1293.090401][ T8474] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1293.090421][ T8474] usb 8-1: Product: syz
[ 1293.090436][ T8474] usb 8-1: Manufacturer: syz
[ 1293.090451][ T8474] usb 8-1: SerialNumber: syz
[ 1293.298951][ T6080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1293.416467][ T6080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1294.120135][ T6080] bond0 (unregistering): Released all slaves
[ 1294.367992][  T115] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1294.370817][  T115] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1294.502113][ T8474] usb 8-1: 0:2 : does not exist
[ 1294.561438][T17931] binder: 17930:17931 ioctl c0306201 2000000003c0 returned -14
[ 1295.293158][ T8474] usb 8-1: USB disconnect, device number 43
[ 1295.394143][ T6080] hsr_slave_0: left promiscuous mode
[ 1295.438879][T17801] udevd[17801]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1295.464053][ T6080] hsr_slave_1: left promiscuous mode
[ 1295.465145][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1295.542360][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1295.694138][ T8474] usb 8-1: new high-speed USB device number 44 using dummy_hcd
[ 1295.846158][ T8474] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1295.846194][ T8474] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1295.855191][ T8474] usb 8-1: config 0 descriptor??
[ 1295.892007][ T8474] cp210x 8-1:0.0: cp210x converter detected
[ 1296.090556][ T8474] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -32
[ 1296.090650][ T8474] cp210x 8-1:0.0: querying part number failed
[ 1296.113179][ T8474] usb 8-1: cp210x converter now attached to ttyUSB0
[ 1296.204822][ T6080] team0 (unregistering): Port device team_slave_1 removed
[ 1296.213464][ T8474] usb 8-1: USB disconnect, device number 44
[ 1296.255849][ T8474] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1296.256746][ T8474] cp210x 8-1:0.0: device disconnected
[ 1296.297591][ T6080] team0 (unregistering): Port device team_slave_0 removed
[ 1296.677440][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1296.677683][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1297.414335][ T8474] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[ 1297.604078][ T8474] usb 7-1: Using ep0 maxpacket: 16
[ 1297.620366][ T8474] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1297.620396][ T8474] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1297.682772][ T8474] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1297.682805][ T8474] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1297.683522][ T8474] usb 7-1: Product: syz
[ 1297.683533][ T8474] usb 7-1: Manufacturer: syz
[ 1297.683543][ T8474] usb 7-1: SerialNumber: syz
[ 1298.103265][ T8474] usb 7-1: 0:2 : does not exist
[ 1298.203357][ T8474] usb 7-1: USB disconnect, device number 47
[ 1298.388894][T17801] udevd[17801]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1298.435611][T17980] siw: device registration error -23
[ 1300.841506][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.841587][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1301.246861][T17427] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1301.878420][T18024] netlink: zone id is out of range
[ 1301.878441][T18024] netlink: zone id is out of range
[ 1301.878449][T18024] netlink: zone id is out of range
[ 1301.878457][T18024] netlink: zone id is out of range
[ 1302.820277][T18035] affs: No valid root block on device nullb0
[ 1302.964054][ T6127] usb 8-1: new high-speed USB device number 45 using dummy_hcd
[ 1303.057767][T17663] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1303.104310][ T6127] usb 8-1: device descriptor read/64, error -71
[ 1303.114427][T17663] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1303.161510][T17663] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1303.222032][T17663] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1303.458209][ T6127] usb 8-1: new high-speed USB device number 46 using dummy_hcd
[ 1303.594174][ T6127] usb 8-1: device descriptor read/64, error -71
[ 1303.671962][T17427] veth0_vlan: entered promiscuous mode
[ 1303.682581][T18054] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3463'.
[ 1303.717163][ T6127] usb usb8-port1: attempt power cycle
[ 1303.729950][T17427] veth1_vlan: entered promiscuous mode
[ 1303.991100][T17663] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1304.016175][T17427] veth0_macvtap: entered promiscuous mode
[ 1304.059978][T17427] veth1_macvtap: entered promiscuous mode
[ 1304.084168][ T6127] usb 8-1: new high-speed USB device number 47 using dummy_hcd
[ 1304.113642][ T6127] usb 8-1: device descriptor read/8, error -71
[ 1304.218435][T17663] 8021q: adding VLAN 0 to HW filter on device team0
[ 1304.276964][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1304.277133][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1304.342205][T10378] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1304.342308][T10378] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1304.374086][ T6127] usb 8-1: new high-speed USB device number 48 using dummy_hcd
[ 1304.406290][ T6127] usb 8-1: device descriptor read/8, error -71
[ 1304.548339][ T6127] usb usb8-port1: unable to enumerate USB device
[ 1305.445692][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1305.551873][T18079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3466'.
[ 1306.267494][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1306.274609][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1306.317837][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1306.384139][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1306.664714][T18074] wlan1 speed is unknown, defaulting to 1000
[ 1306.671812][T18074] lo speed is unknown, defaulting to 1000
[ 1306.721891][T17663] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1306.965740][T12260] Bluetooth: hci3: unexpected event for opcode 0x2023
[ 1306.968281][T18091] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3470'.
[ 1308.214064][ T6127] usb 8-1: new high-speed USB device number 49 using dummy_hcd
[ 1308.374009][T14411] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 1308.386742][ T6127] usb 8-1: Using ep0 maxpacket: 16
[ 1308.389736][ T6127] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1308.389766][ T6127] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1308.407182][ T6127] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1308.407219][ T6127] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1308.407240][ T6127] usb 8-1: Product: syz
[ 1308.407256][ T6127] usb 8-1: Manufacturer: syz
[ 1308.407272][ T6127] usb 8-1: SerialNumber: syz
[ 1308.504233][T12260] Bluetooth: hci4: command tx timeout
[ 1308.607772][T14411] usb 2-1: Using ep0 maxpacket: 16
[ 1308.610773][T14411] usb 2-1: config 0 has an invalid descriptor of length 217, skipping remainder of the config
[ 1308.610837][T14411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1308.610867][T14411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1308.610891][T14411] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1308.610915][T14411] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1308.612722][T14411] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1308.612752][T14411] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1308.612773][T14411] usb 2-1: Manufacturer: syz
[ 1308.618524][T14411] usb 2-1: config 0 descriptor??
[ 1308.970435][ T6127] usb 8-1: 0:2 : does not exist
[ 1309.045471][ T6127] usb 8-1: USB disconnect, device number 49
[ 1309.151950][T17801] udevd[17801]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1309.164215][T14411] rc_core: IR keymap rc-hauppauge not found
[ 1309.164235][T14411] Registered IR keymap rc-empty
[ 1309.164397][T14411] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1309.184130][T14411] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1309.205265][T14411] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1309.207545][T14411] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input21
[ 1309.255432][T14411] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1309.274460][T14411] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1309.294295][T14411] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1309.314852][T14411] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1309.334159][T14411] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1309.357071][T14411] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1309.374291][T14411] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1309.394135][T14411] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1309.414173][T14411] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1309.445607][T14411] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1309.470156][T14411] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1309.470243][T14411] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1309.537155][ T6127] usb 2-1: USB disconnect, device number 55
[ 1310.246397][T18121] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3475'.
[ 1310.598062][T12260] Bluetooth: hci4: command tx timeout
[ 1311.315879][T18133] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3480'.
[ 1311.830033][T18144] netlink: zone id is out of range
[ 1311.830051][T18144] netlink: zone id is out of range
[ 1311.830059][T18144] netlink: zone id is out of range
[ 1311.830067][T18144] netlink: zone id is out of range
[ 1312.225646][T18074] chnl_net:caif_netlink_parms(): no params data found
[ 1312.695766][T12260] Bluetooth: hci4: command tx timeout
[ 1313.178151][ T6127] usb 8-1: new high-speed USB device number 50 using dummy_hcd
[ 1313.388208][ T6127] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1313.388243][ T6127] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1313.419794][T17663] veth0_vlan: entered promiscuous mode
[ 1313.460930][T18074] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1313.461061][T18074] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1313.461353][T18074] bridge_slave_0: entered allmulticast mode
[ 1313.487834][ T6127] usb 8-1: config 0 descriptor??
[ 1313.525149][ T6127] cp210x 8-1:0.0: cp210x converter detected
[ 1313.532566][T18074] bridge_slave_0: entered promiscuous mode
[ 1313.726427][ T6127] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -32
[ 1313.726459][ T6127] cp210x 8-1:0.0: querying part number failed
[ 1313.748293][ T6127] usb 8-1: cp210x converter now attached to ttyUSB0
[ 1313.780057][ T6127] usb 8-1: USB disconnect, device number 50
[ 1313.782096][T18074] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1313.782322][T18074] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1313.782608][T18074] bridge_slave_1: entered allmulticast mode
[ 1313.857019][T18074] bridge_slave_1: entered promiscuous mode
[ 1313.857944][ T6127] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1313.858874][ T6127] cp210x 8-1:0.0: device disconnected
[ 1314.012469][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3493'.
[ 1314.037362][T18074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1314.067715][T17663] veth1_vlan: entered promiscuous mode
[ 1314.078217][T18074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1314.118149][ T2939] bridge_slave_1: left allmulticast mode
[ 1314.118181][ T2939] bridge_slave_1: left promiscuous mode
[ 1314.122890][ T2939] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1314.186721][ T2939] bridge_slave_0: left allmulticast mode
[ 1314.186745][ T2939] bridge_slave_0: left promiscuous mode
[ 1314.186928][ T2939] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1314.455886][T18182] netlink: zone id is out of range
[ 1314.455904][T18182] netlink: zone id is out of range
[ 1314.455913][T18182] netlink: zone id is out of range
[ 1314.455921][T18182] netlink: zone id is out of range
[ 1314.753910][T12260] Bluetooth: hci4: command tx timeout
[ 1315.620276][ T2939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1315.680708][ T2939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1315.781312][T18196] fuse: root generation should be zero
[ 1315.794518][ T2939] bond0 (unregistering): Released all slaves
[ 1316.074060][T14411] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 1316.188693][T18074] team0: Port device team_slave_0 added
[ 1316.207656][T18074] team0: Port device team_slave_1 added
[ 1316.407487][T14411] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1316.409012][T14411] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1316.409087][T14411] usb 2-1: too many endpoints for config 1 interface 1 altsetting 2: 128, using maximum allowed: 30
[ 1316.409127][T14411] usb 2-1: config 1 interface 1 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 128
[ 1316.409145][T14411] usb 2-1: config 1 interface 1 has no altsetting 1
[ 1316.413649][T14411] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1316.413677][T14411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1316.413688][T14411] usb 2-1: Product: syz
[ 1316.413696][T14411] usb 2-1: Manufacturer: syz
[ 1316.413705][T14411] usb 2-1: SerialNumber: syz
[ 1316.434661][ T2939] hsr_slave_0: left promiscuous mode
[ 1316.515492][ T2939] hsr_slave_1: left promiscuous mode
[ 1316.516661][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1316.555231][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1316.710499][ T2939] veth1_macvtap: left promiscuous mode
[ 1316.732851][ T2939] veth0_macvtap: left promiscuous mode
[ 1316.743399][ T2939] veth1_vlan: left promiscuous mode
[ 1316.750446][ T2939] veth0_vlan: left promiscuous mode
[ 1318.260060][ T2939] team0 (unregistering): Port device team_slave_1 removed
[ 1318.318663][ T2939] team0 (unregistering): Port device team_slave_0 removed
[ 1318.807685][T18074] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1318.807705][T18074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1318.807732][T18074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1318.849461][T14411] usb 2-1: selecting invalid altsetting 1
[ 1318.862797][T14411] cdc_ncm 2-1:1.0: bind() failure
[ 1318.887127][T18074] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1318.887146][T18074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1318.887162][T18074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1318.924062][T12472] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[ 1318.933764][T14411] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 1318.934484][T14411] cdc_ncm 2-1:1.1: bind() failure
[ 1318.965480][T14411] usb 2-1: USB disconnect, device number 56
[ 1318.975559][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3505'.
[ 1319.058345][T17663] veth0_macvtap: entered promiscuous mode
[ 1319.076280][T12472] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1319.076312][T12472] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1319.076334][T12472] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1319.076409][T12472] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1319.078488][T12472] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1319.078519][T12472] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1319.078541][T12472] usb 7-1: Product: syz
[ 1319.078556][T12472] usb 7-1: Manufacturer: syz
[ 1319.197863][T12472] cdc_wdm 7-1:1.0: skipping garbage
[ 1319.197879][T12472] cdc_wdm 7-1:1.0: skipping garbage
[ 1319.202105][T12472] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[ 1319.202130][T12472] cdc_wdm 7-1:1.0: Unknown control protocol
[ 1319.217554][T17663] veth1_macvtap: entered promiscuous mode
[ 1319.307898][T18074] hsr_slave_0: entered promiscuous mode
[ 1319.309498][T18074] hsr_slave_1: entered promiscuous mode
[ 1319.514611][T17663] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1320.008130][T17663] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1321.032398][T16500] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1321.059366][T16500] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1321.130020][T16500] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1321.222216][T16500] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1321.974027][T14408] usb 7-1: USB disconnect, device number 48
[ 1323.299505][T18267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3516'.
[ 1324.292423][T10378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1324.292481][T10378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1326.556008][ T1357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1326.556026][ T1357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1326.905759][  T994] usb 8-1: new high-speed USB device number 51 using dummy_hcd
[ 1327.075430][  T994] usb 8-1: Using ep0 maxpacket: 16
[ 1327.078336][  T994] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1327.078370][  T994] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1327.078395][  T994] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1327.078448][  T994] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1327.078473][  T994] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1327.146610][  T994] usb 8-1: config 0 descriptor??
[ 1327.586352][  T994] shield 0003:0955:7214.0009: unknown main item tag 0x0
[ 1327.586395][  T994] shield 0003:0955:7214.0009: unknown main item tag 0x0
[ 1327.586434][  T994] shield 0003:0955:7214.0009: unknown main item tag 0x0
[ 1327.586461][  T994] shield 0003:0955:7214.0009: unknown main item tag 0x0
[ 1327.586487][  T994] shield 0003:0955:7214.0009: unknown main item tag 0x0
[ 1327.658037][  T994] input: HID 0955:7214 Haptics as /devices/virtual/input/input22
[ 1327.812009][  T994] shield 0003:0955:7214.0009: Registered Thunderstrike controller
[ 1327.828432][  T994] shield 0003:0955:7214.0009: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0
[ 1329.092924][T14410] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN
[ 1329.093126][T14410] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT
[ 1329.093237][T14410] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT
[ 1329.093343][T14410] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT
[ 1329.286849][ T8474] usb 8-1: reset high-speed USB device number 51 using dummy_hcd
[ 1329.532189][ T8474] usb 8-1: device descriptor read/64, error -32
[ 1330.784220][ T8474] usb 8-1: reset high-speed USB device number 51 using dummy_hcd
[ 1330.904745][T18249] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[ 1330.967497][T18074] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1331.084408][T18249] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1331.084514][T18249] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[ 1331.107273][T18249] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1331.107381][T18249] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1331.107439][T18249] usb 7-1: Product: syz
[ 1331.107489][T18249] usb 7-1: Manufacturer: syz
[ 1331.107539][T18249] usb 7-1: SerialNumber: syz
[ 1331.733050][T18074] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1332.229197][T14408] usb 8-1: USB disconnect, device number 51
[ 1332.237670][T18074] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1332.268764][T18249] usb 7-1: config 0 descriptor??
[ 1332.402693][T18074] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1332.885686][T18249] usb 7-1: USB disconnect, device number 49
[ 1333.162069][T17622] udevd[17622]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1334.521227][T18074] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1334.608772][T18074] 8021q: adding VLAN 0 to HW filter on device team0
[ 1334.667012][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1334.672655][ T6080] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1334.732439][  T115] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1334.732526][  T115] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1337.114009][T14408] usb 8-1: new high-speed USB device number 52 using dummy_hcd
[ 1337.266210][T14408] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1337.266242][T14408] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[ 1337.268970][T14408] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1337.268997][T14408] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1337.269009][T14408] usb 8-1: Product: syz
[ 1337.269018][T14408] usb 8-1: Manufacturer: syz
[ 1337.269027][T14408] usb 8-1: SerialNumber: syz
[ 1337.337783][T14408] usb 8-1: config 0 descriptor??
[ 1337.559054][T18074] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1340.644083][T14408] usb 8-1: USB disconnect, device number 52
[ 1341.063501][T17579] udevd[17579]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1341.926329][T18074] veth0_vlan: entered promiscuous mode
[ 1342.044078][T18074] veth1_vlan: entered promiscuous mode
[ 1343.433988][ T5807] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1343.530830][T18074] veth0_macvtap: entered promiscuous mode
[ 1343.557929][T18074] veth1_macvtap: entered promiscuous mode
[ 1343.608299][ T5807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1343.608333][ T5807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[ 1343.610353][ T5807] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1343.610372][ T5807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1343.610384][ T5807] usb 6-1: Product: syz
[ 1343.610393][ T5807] usb 6-1: Manufacturer: syz
[ 1343.610401][ T5807] usb 6-1: SerialNumber: syz
[ 1343.621777][ T5807] usb 6-1: config 0 descriptor??
[ 1343.685085][T18074] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1343.867847][T18074] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1344.054567][ T6080] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1344.054923][ T6080] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1344.056916][ T6080] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1344.056960][ T6080] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1344.247589][ T5807] usb 6-1: USB disconnect, device number 48
[ 1344.910199][T17579] udevd[17579]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1345.916695][T10375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1345.916718][T10375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1346.006207][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1346.006232][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1346.809392][T18536] fuse: Bad value for 'fd'
[ 1348.019310][T18552] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3577'.
[ 1348.379343][T18552] hsr_slave_1 (unregistering): left promiscuous mode
[ 1348.554077][T18247] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 1348.908002][T18247] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1348.908035][T18247] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1348.908056][T18247] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1348.908112][T18247] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1348.912037][T18247] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1348.912067][T18247] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1348.912091][T18247] usb 2-1: Product: syz
[ 1348.912106][T18247] usb 2-1: Manufacturer: syz
[ 1349.602575][T18247] cdc_wdm 2-1:1.0: skipping garbage
[ 1349.602597][T18247] cdc_wdm 2-1:1.0: skipping garbage
[ 1349.806355][T18247] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1349.806381][T18247] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1350.201141][ T5877] usb 2-1: USB disconnect, device number 57
[ 1350.617755][T18597] fuse: Bad value for 'fd'
[ 1351.005700][T18604] netlink: zone id is out of range
[ 1351.005717][T18604] netlink: zone id is out of range
[ 1351.005726][T18604] netlink: zone id is out of range
[ 1351.005735][T18604] netlink: zone id is out of range
[ 1351.086191][T18326] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1351.414307][T18326] usb 10-1: Using ep0 maxpacket: 16
[ 1351.418577][T18326] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1351.418613][T18326] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1351.418637][T18326] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1351.418684][T18326] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1351.418709][T18326] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1351.569820][T18326] usb 10-1: config 0 descriptor??
[ 1352.012879][T18326] shield 0003:0955:7214.000A: unknown main item tag 0x0
[ 1352.012917][T18326] shield 0003:0955:7214.000A: unknown main item tag 0x0
[ 1352.012942][T18326] shield 0003:0955:7214.000A: unknown main item tag 0x0
[ 1352.012965][T18326] shield 0003:0955:7214.000A: unknown main item tag 0x0
[ 1352.012990][T18326] shield 0003:0955:7214.000A: unknown main item tag 0x0
[ 1352.483916][T18326] input: HID 0955:7214 Haptics as /devices/virtual/input/input23
[ 1352.585672][T18625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3597'.
[ 1352.618377][T18326] shield 0003:0955:7214.000A: Registered Thunderstrike controller
[ 1352.618819][T18326] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0
[ 1352.855280][T18599] random: crng reseeded on system resumption
[ 1353.834214][ T8483] usb 8-1: new high-speed USB device number 53 using dummy_hcd
[ 1353.944104][  T994] usb 10-1: reset high-speed USB device number 2 using dummy_hcd
[ 1354.009603][ T8483] usb 8-1: Using ep0 maxpacket: 8
[ 1354.076792][T18326] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN
[ 1354.077169][T18326] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1354.077537][T18326] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1354.124001][ T8483] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1354.124020][ T8483] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1354.164082][ T8483] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1354.164118][ T8483] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1354.164140][ T8483] usb 8-1: Product: syz
[ 1354.164165][ T8483] usb 8-1: Manufacturer: syz
[ 1354.164180][ T8483] usb 8-1: SerialNumber: syz
[ 1354.203617][ T8483] usb 8-1: config 0 descriptor??
[ 1354.672044][T18654] affs: No valid root block on device nullb0
[ 1355.709344][T14411] usb 10-1: USB disconnect, device number 2
[ 1355.738624][T18657] netlink: zone id is out of range
[ 1355.738642][T18657] netlink: zone id is out of range
[ 1355.738651][T18657] netlink: zone id is out of range
[ 1355.738660][T18657] netlink: zone id is out of range
[ 1356.354257][T18668] fuse: Bad value for 'fd'
[ 1358.238778][T14408] usb 8-1: USB disconnect, device number 53
[ 1358.809300][T18677] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3611'.
[ 1361.044363][T18713] netlink: zone id is out of range
[ 1361.044381][T18713] netlink: zone id is out of range
[ 1361.044389][T18713] netlink: zone id is out of range
[ 1361.044398][T18713] netlink: zone id is out of range
[ 1361.164098][ T5877] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1361.563081][T18721] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1361.634092][ T5877] usb 10-1: Using ep0 maxpacket: 16
[ 1361.639458][ T5877] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1361.639493][ T5877] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1361.639619][ T5877] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1361.639667][ T5877] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1361.639690][ T5877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1361.808662][ T5877] usb 10-1: config 0 descriptor??
[ 1362.871497][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1362.871925][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1363.199675][ T5877] shield 0003:0955:7214.000B: unknown main item tag 0x0
[ 1363.199700][ T5877] shield 0003:0955:7214.000B: unknown main item tag 0x0
[ 1363.199716][ T5877] shield 0003:0955:7214.000B: unknown main item tag 0x0
[ 1363.199731][ T5877] shield 0003:0955:7214.000B: unknown main item tag 0x0
[ 1363.199746][ T5877] shield 0003:0955:7214.000B: unknown main item tag 0x0
[ 1363.340595][ T5877] input: HID 0955:7214 Haptics as /devices/virtual/input/input24
[ 1363.921714][T18709] random: crng reseeded on system resumption
[ 1364.424484][ T5877] shield 0003:0955:7214.000B: Registered Thunderstrike controller
[ 1364.425007][ T5877] shield 0003:0955:7214.000B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0
[ 1365.085671][T14408] usb 10-1: USB disconnect, device number 3
[ 1365.087412][T18247] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1365.087496][T18247] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1365.087568][T18247] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1365.087640][T18247] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1366.794194][T18249] usb 8-1: new high-speed USB device number 54 using dummy_hcd
[ 1366.984353][T18249] usb 8-1: Using ep0 maxpacket: 16
[ 1367.389329][T18249] usb 8-1: too many configurations: 251, using maximum allowed: 8
[ 1367.660863][T18249] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1367.660895][T18249] usb 8-1: config 0 has no interfaces?
[ 1367.701474][T18249] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1367.701505][T18249] usb 8-1: config 0 has no interfaces?
[ 1367.745264][T18249] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1367.745298][T18249] usb 8-1: config 0 has no interfaces?
[ 1367.750885][T18249] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1367.750916][T18249] usb 8-1: config 0 has no interfaces?
[ 1367.782207][T18249] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1367.782238][T18249] usb 8-1: config 0 has no interfaces?
[ 1367.793534][T18249] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1367.793553][T18249] usb 8-1: config 0 has no interfaces?
[ 1367.808650][T18249] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1367.808672][T18249] usb 8-1: config 0 has no interfaces?
[ 1367.811644][T18249] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1367.811673][T18249] usb 8-1: config 0 has no interfaces?
[ 1367.819216][T18249] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[ 1367.819251][T18249] usb 8-1: New USB device strings: Mfr=14, Product=241, SerialNumber=178
[ 1367.819273][T18249] usb 8-1: Product: syz
[ 1367.819289][T18249] usb 8-1: Manufacturer: syz
[ 1367.819304][T18249] usb 8-1: SerialNumber: syz
[ 1367.944827][T18249] usb 8-1: config 0 descriptor??
[ 1368.648665][T14408] usb 8-1: USB disconnect, device number 54
[ 1370.154006][T14408] usb 8-1: new high-speed USB device number 55 using dummy_hcd
[ 1370.420049][T14411] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[ 1370.444028][T14408] usb 8-1: Using ep0 maxpacket: 16
[ 1370.445753][T14408] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1370.445774][T14408] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1370.445788][T14408] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1370.445813][T14408] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1370.445827][T14408] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1370.449018][T14408] usb 8-1: config 0 descriptor??
[ 1370.602663][T14411] usb 7-1: Using ep0 maxpacket: 8
[ 1370.608007][T14411] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1370.612635][T14411] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1370.612730][T14411] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1370.612750][T14411] usb 7-1: Product: syz
[ 1370.612763][T14411] usb 7-1: Manufacturer: syz
[ 1370.612777][T14411] usb 7-1: SerialNumber: syz
[ 1370.628716][T14411] usb 7-1: config 0 descriptor??
[ 1371.227714][T14408] shield 0003:0955:7214.000C: unknown main item tag 0x0
[ 1371.227753][T14408] shield 0003:0955:7214.000C: unknown main item tag 0x0
[ 1371.227781][T14408] shield 0003:0955:7214.000C: unknown main item tag 0x0
[ 1371.227807][T14408] shield 0003:0955:7214.000C: unknown main item tag 0x0
[ 1371.227833][T14408] shield 0003:0955:7214.000C: unknown main item tag 0x0
[ 1371.275211][T18792] random: crng reseeded on system resumption
[ 1371.407477][T14408] input: HID 0955:7214 Haptics as /devices/virtual/input/input25
[ 1371.822013][T18811] affs: No valid root block on device nullb0
[ 1373.008308][T14408] shield 0003:0955:7214.000C: Registered Thunderstrike controller
[ 1373.008724][T14408] shield 0003:0955:7214.000C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0
[ 1373.070541][T14408] usb 8-1: USB disconnect, device number 55
[ 1373.102552][  T994] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1373.102641][  T994] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1373.102711][  T994] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1373.102775][  T994] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1373.220564][T18326] usb 7-1: USB disconnect, device number 50
[ 1379.264579][T18849] affs: No valid root block on device nullb0
[ 1380.224024][T14411] usb 8-1: new high-speed USB device number 56 using dummy_hcd
[ 1380.373942][T14411] usb 8-1: Using ep0 maxpacket: 16
[ 1380.376929][T14411] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1380.376964][T14411] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1380.376988][T14411] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1380.377035][T14411] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1380.377058][T14411] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1380.383272][T14411] usb 8-1: config 0 descriptor??
[ 1380.743970][T18247] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 1380.853033][T14411] shield 0003:0955:7214.000D: unknown main item tag 0x0
[ 1380.853065][T14411] shield 0003:0955:7214.000D: unknown main item tag 0x0
[ 1380.853080][T14411] shield 0003:0955:7214.000D: unknown main item tag 0x0
[ 1380.853096][T14411] shield 0003:0955:7214.000D: unknown main item tag 0x0
[ 1380.853111][T14411] shield 0003:0955:7214.000D: unknown main item tag 0x0
[ 1380.905795][T14411] input: HID 0955:7214 Haptics as /devices/virtual/input/input26
[ 1380.914778][T18247] usb 6-1: Using ep0 maxpacket: 8
[ 1380.923930][T18247] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1380.944332][T18247] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1380.944364][T18247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1380.944384][T18247] usb 6-1: Product: syz
[ 1380.944398][T18247] usb 6-1: Manufacturer: syz
[ 1380.944412][T18247] usb 6-1: SerialNumber: syz
[ 1381.042720][T14411] shield 0003:0955:7214.000D: Registered Thunderstrike controller
[ 1381.043723][T14411] shield 0003:0955:7214.000D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0
[ 1381.064562][T18247] usb 6-1: config 0 descriptor??
[ 1381.121644][T18846] random: crng reseeded on system resumption
[ 1381.368009][T14408] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1381.368375][T14408] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1381.368926][T14408] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1381.369262][T14408] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1381.394005][T14411] usb 8-1: USB disconnect, device number 56
[ 1385.214700][T14408] usb 6-1: USB disconnect, device number 49
[ 1385.421777][   T36] kauditd_printk_skb: 27 callbacks suppressed
[ 1385.421798][   T36] audit: type=1326 audit(1775066423.933:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18869 comm="syz.5.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115244c819 code=0x7ffc0000
[ 1385.421851][   T36] audit: type=1326 audit(1775066423.933:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18869 comm="syz.5.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115244c819 code=0x7ffc0000
[ 1385.441361][   T36] audit: type=1326 audit(1775066423.953:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18869 comm="syz.5.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f115244c819 code=0x7ffc0000
[ 1385.441417][   T36] audit: type=1326 audit(1775066423.953:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18869 comm="syz.5.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115244c819 code=0x7ffc0000
[ 1385.441458][   T36] audit: type=1326 audit(1775066423.953:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18869 comm="syz.5.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f115240d04e code=0x7ffc0000
[ 1385.441501][   T36] audit: type=1326 audit(1775066423.953:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18869 comm="syz.5.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f115240d04e code=0x7ffc0000
[ 1385.441544][   T36] audit: type=1326 audit(1775066423.953:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18869 comm="syz.5.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115244c819 code=0x7ffc0000
[ 1385.441590][   T36] audit: type=1326 audit(1775066423.953:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18869 comm="syz.5.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f115244c819 code=0x7ffc0000
[ 1385.441635][   T36] audit: type=1326 audit(1775066423.953:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18869 comm="syz.5.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115244c819 code=0x7ffc0000
[ 1385.443656][   T36] audit: type=1326 audit(1775066423.953:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18869 comm="syz.5.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f115244c819 code=0x7ffc0000
[ 1385.672890][T12260] Bluetooth: hci3: unexpected event for opcode 0x2023
[ 1386.620652][ T8483] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[ 1387.940725][ T8483] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1387.950944][ T8483] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1387.951052][ T8483] usb 7-1: too many endpoints for config 1 interface 1 altsetting 2: 128, using maximum allowed: 30
[ 1387.951107][ T8483] usb 7-1: config 1 interface 1 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 128
[ 1387.951136][ T8483] usb 7-1: config 1 interface 1 has no altsetting 1
[ 1387.961115][ T8483] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1387.961146][ T8483] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1387.961166][ T8483] usb 7-1: Product: syz
[ 1387.961180][ T8483] usb 7-1: Manufacturer: syz
[ 1387.961194][ T8483] usb 7-1: SerialNumber: syz
[ 1389.820043][ T8483] usb 7-1: selecting invalid altsetting 1
[ 1389.974875][ T8483] cdc_ncm 7-1:1.0: bind() failure
[ 1390.008071][ T8483] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[ 1390.008105][ T8483] cdc_ncm 7-1:1.1: bind() failure
[ 1390.044745][ T8483] usb 7-1: USB disconnect, device number 51
[ 1393.214023][T14408] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1393.367151][T14408] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1393.367172][T14408] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1393.367183][T14408] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1393.367214][T14408] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1393.368625][T14408] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1393.368641][T14408] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1393.368656][T14408] usb 10-1: Product: syz
[ 1393.368665][T14408] usb 10-1: Manufacturer: syz
[ 1393.418967][T14408] cdc_wdm 10-1:1.0: skipping garbage
[ 1393.418987][T14408] cdc_wdm 10-1:1.0: skipping garbage
[ 1393.566809][T14408] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[ 1393.566826][T14408] cdc_wdm 10-1:1.0: Unknown control protocol
[ 1393.623700][T18326] usb 10-1: USB disconnect, device number 4
[ 1393.700019][T12260] Bluetooth: hci0: unexpected event for opcode 0x2023
[ 1394.984020][T18247] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 1395.398118][T18247] usb 2-1: Using ep0 maxpacket: 8
[ 1395.403690][T18945] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3681'.
[ 1396.493375][T18952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3682'.
[ 1396.519781][T18247] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[ 1396.519815][T18247] usb 2-1: config 0 has no interface number 0
[ 1396.519861][T18247] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1396.519886][T18247] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1396.519904][T18247] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1396.519920][T18247] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1396.519948][T18247] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1396.519962][T18247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1396.624128][T18247] usb 2-1: config 0 descriptor??
[ 1396.666162][T18247] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1397.404754][T14411] usb 2-1: USB disconnect, device number 58
[ 1397.415844][T14411] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[ 1400.200773][T16723] Bluetooth: hci5: command 0x0406 tx timeout
[ 1400.315427][T16723] Bluetooth: hci0: unexpected event for opcode 0x2023
[ 1402.140038][T18994] uprobe: syz.5.3694:18994 failed to unregister, leaking uprobe
[ 1402.259077][T18999] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3696'.
[ 1403.144249][T18247] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[ 1403.383928][T18247] usb 7-1: Using ep0 maxpacket: 16
[ 1403.534306][T18247] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1403.534329][T18247] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1403.534342][T18247] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1403.534369][T18247] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1403.534383][T18247] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1403.540649][T18247] usb 7-1: config 0 descriptor??
[ 1404.462364][T12260] Bluetooth: hci2: Malformed MSFT vendor event: 0x02
[ 1404.686024][T18247] input: HID 0955:7214 Haptics as /devices/virtual/input/input27
[ 1404.788916][T18247] shield 0003:0955:7214.000E: Registered Thunderstrike controller
[ 1404.804476][T18247] shield 0003:0955:7214.000E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0
[ 1405.100413][ T6127] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1405.100835][ T6127] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1405.101182][T14408] usb 7-1: USB disconnect, device number 52
[ 1405.101194][ T6127] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1405.101266][ T6127] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1406.134193][ T6127] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 1406.435691][T19035] uprobe: syz.1.3708:19035 failed to unregister, leaking uprobe
[ 1406.507037][T19038] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3710'.
[ 1406.556028][ T6127] usb 10-1: Using ep0 maxpacket: 16
[ 1406.558549][ T6127] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1406.558585][ T6127] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1406.558609][ T6127] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1406.558655][ T6127] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1406.558679][ T6127] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1408.294215][ T6127] usb 10-1: config 0 descriptor??
[ 1408.539415][ T6127] usbhid 10-1:0.0: can't add hid device: -71
[ 1408.539576][ T6127] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1409.448577][ T6127] usb 10-1: USB disconnect, device number 5
[ 1411.793973][T14408] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[ 1412.943915][T14408] usb 7-1: Using ep0 maxpacket: 16
[ 1412.947185][T14408] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1412.947226][T14408] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1412.947251][T14408] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1412.947303][T14408] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1412.947327][T14408] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1412.961318][T14408] usb 7-1: config 0 descriptor??
[ 1413.220483][T12260] Bluetooth: hci2: Malformed MSFT vendor event: 0x02
[ 1414.145045][T14408] input: HID 0955:7214 Haptics as /devices/virtual/input/input28
[ 1414.213237][T14408] shield 0003:0955:7214.000F: Registered Thunderstrike controller
[ 1414.213556][T14408] shield 0003:0955:7214.000F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0
[ 1414.256146][T19085] uprobe: syz.1.3723:19085 failed to unregister, leaking uprobe
[ 1414.276131][T14411] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1414.276487][T14411] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1414.276837][T14411] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1414.277199][T14411] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1414.360585][T14408] usb 7-1: USB disconnect, device number 53
[ 1415.353980][ T6127] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1415.504070][ T6127] usb 2-1: Using ep0 maxpacket: 16
[ 1415.511854][ T6127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1415.511901][ T6127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1415.511964][ T6127] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1415.512098][ T6127] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1415.512123][ T6127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1415.769287][ T6127] usb 2-1: config 0 descriptor??
[ 1416.690520][ T6127] shield 0003:0955:7214.0010: unknown main item tag 0x0
[ 1416.690773][ T6127] shield 0003:0955:7214.0010: unknown main item tag 0x0
[ 1416.691525][ T6127] shield 0003:0955:7214.0010: unknown main item tag 0x0
[ 1416.692427][ T6127] shield 0003:0955:7214.0010: unknown main item tag 0x0
[ 1416.692456][ T6127] shield 0003:0955:7214.0010: unknown main item tag 0x0
[ 1416.766818][T19093] random: crng reseeded on system resumption
[ 1417.416667][T19118] binder: BINDER_SET_CONTEXT_MGR already set
[ 1417.417885][T19118] binder: 19114:19118 ioctl 4018620d 200000004a80 returned -16
[ 1417.860429][ T6127] input: HID 0955:7214 Haptics as /devices/virtual/input/input29
[ 1419.518856][ T6127] shield 0003:0955:7214.0010: Registered Thunderstrike controller
[ 1419.519287][ T6127] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0
[ 1419.582389][T18249] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1420.045163][ T6127] usb 2-1: USB disconnect, device number 59
[ 1420.046358][T18249] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1420.046441][T18249] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1420.046514][T18249] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1421.651220][T14408] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[ 1421.796714][T14408] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1421.796748][T14408] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1421.796767][T14408] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1421.796822][T14408] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1421.801791][T14408] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1421.801821][T14408] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1421.801842][T14408] usb 10-1: Product: syz
[ 1421.801855][T14408] usb 10-1: Manufacturer: syz
[ 1421.861844][T14408] cdc_wdm 10-1:1.0: skipping garbage
[ 1421.861867][T14408] cdc_wdm 10-1:1.0: skipping garbage
[ 1421.962255][T14408] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[ 1421.962279][T14408] cdc_wdm 10-1:1.0: Unknown control protocol
[ 1422.020471][T19138] binder: 19137:19138 ioctl c0306201 2000000003c0 returned -14
[ 1422.639418][T14411] usb 10-1: USB disconnect, device number 6
[ 1423.918774][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.919695][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1425.018847][T19167] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3748'.
[ 1425.745897][T19182] binder: BINDER_SET_CONTEXT_MGR already set
[ 1425.745915][T19182] binder: 19181:19182 ioctl 4018620d 200000000040 returned -16
[ 1426.114147][T14411] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1426.597977][T14411] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1426.598012][T14411] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1426.598032][T14411] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1426.598358][T14411] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1426.785310][T14411] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1426.785332][T14411] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1426.785345][T14411] usb 10-1: Product: syz
[ 1426.785354][T14411] usb 10-1: Manufacturer: syz
[ 1426.809660][T14411] cdc_wdm 10-1:1.0: skipping garbage
[ 1426.809682][T14411] cdc_wdm 10-1:1.0: skipping garbage
[ 1426.848129][T14411] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[ 1426.848145][T14411] cdc_wdm 10-1:1.0: Unknown control protocol
[ 1427.360983][T18249] usb 10-1: USB disconnect, device number 7
[ 1428.331384][T19198] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[ 1429.056112][ T6127] IPVS: starting estimator thread 0...
[ 1429.145895][T19208] IPVS: using max 10 ests per chain, 24000 per kthread
[ 1429.176387][    C1] sd 0:0:1:0: [sda] tag#755 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 1429.176423][    C1] sd 0:0:1:0: [sda] tag#755 CDB: Read(6) 08 00 00 00 00 00
[ 1429.177430][    C1] sd 0:0:1:0: [sda] tag#756 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 1429.177459][    C1] sd 0:0:1:0: [sda] tag#756 CDB: Read(6) 08 00 00 00 00 00
[ 1429.181314][    C1] sd 0:0:1:0: [sda] tag#757 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 1429.181375][    C1] sd 0:0:1:0: [sda] tag#757 CDB: Read(6) 08 00 00 00 00 00
[ 1430.777586][T19219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1430.783727][T19219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1430.786253][ T6127] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1430.790034][T19219] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1430.832129][T19219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1430.842704][T19219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1430.903936][T12260] Bluetooth: hci4: command 0x0406 tx timeout
[ 1430.945524][ T6127] usb 10-1: Using ep0 maxpacket: 8
[ 1430.967523][ T6127] usb 10-1: config 179 has an invalid interface number: 65 but max is 0
[ 1430.967554][ T6127] usb 10-1: config 179 has no interface number 0
[ 1430.967604][ T6127] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1430.967629][ T6127] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1430.967657][ T6127] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1430.967680][ T6127] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1430.967707][ T6127] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1430.967826][ T6127] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1430.967851][ T6127] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1431.014970][T19217] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1431.591137][    C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1431.591203][    C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1431.591377][T12472] usb 10-1: USB disconnect, device number 8
[ 1432.317900][T19226] binder_alloc: 19225: binder_alloc_buf, no vma
[ 1432.948006][T16723] Bluetooth: hci1: command tx timeout
[ 1433.924450][T19218] wlan1 speed is unknown, defaulting to 1000
[ 1433.927437][T19218] lo speed is unknown, defaulting to 1000
[ 1434.154782][T19240] overlayfs: missing 'workdir'
[ 1434.273961][T12472] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 1434.364758][T19246] binder: BINDER_SET_CONTEXT_MGR already set
[ 1434.364776][T19246] binder: 19242:19246 ioctl 4018620d 200000000040 returned -16
[ 1434.444453][T12472] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1434.444488][T12472] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1434.444507][T12472] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1434.444563][T12472] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1434.455215][T12472] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1434.455248][T12472] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1434.455266][T12472] usb 6-1: Product: syz
[ 1434.455279][T12472] usb 6-1: Manufacturer: syz
[ 1434.871418][T19253] affs: No valid root block on device nullb0
[ 1435.504882][T16723] Bluetooth: hci1: command tx timeout
[ 1435.738888][T12472] cdc_wdm 6-1:1.0: skipping garbage
[ 1435.738912][T12472] cdc_wdm 6-1:1.0: skipping garbage
[ 1436.475370][T12472] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1436.475395][T12472] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1437.374487][T12472] usb 6-1: USB disconnect, device number 50
[ 1437.547505][T16723] Bluetooth: hci1: command tx timeout
[ 1438.064888][T16958] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode
[ 1438.619607][T19218] chnl_net:caif_netlink_parms(): no params data found
[ 1439.603223][T16958] bridge_slave_1: left allmulticast mode
[ 1439.603257][T16958] bridge_slave_1: left promiscuous mode
[ 1439.603571][T16958] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1439.623915][T16723] Bluetooth: hci1: command tx timeout
[ 1439.658377][T19285] overlayfs: missing 'lowerdir'
[ 1439.799435][T16958] bridge_slave_0: left allmulticast mode
[ 1439.799458][T16958] bridge_slave_0: left promiscuous mode
[ 1439.799640][T16958] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1439.936977][T19292] binder: 19291:19292 ioctl c0306201 2000000003c0 returned -14
[ 1439.963957][T14408] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1440.131824][T14408] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1440.131857][T14408] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1440.131876][T14408] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1440.131926][T14408] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1440.193471][T14408] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1440.193507][T14408] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1440.193529][T14408] usb 10-1: Product: syz
[ 1440.193544][T14408] usb 10-1: Manufacturer: syz
[ 1440.304173][T14408] cdc_wdm 10-1:1.0: skipping garbage
[ 1440.304196][T14408] cdc_wdm 10-1:1.0: skipping garbage
[ 1440.946644][T14408] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[ 1440.946669][T14408] cdc_wdm 10-1:1.0: Unknown control protocol
[ 1441.007520][T14408] usb 10-1: USB disconnect, device number 9
[ 1441.173291][T19304] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3787'.
[ 1441.991815][T16958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1442.067114][T16958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1442.104896][T16958] bond0 (unregistering): Released all slaves
[ 1442.702499][T19316] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3790'.
[ 1442.934778][T14408] IPVS: starting estimator thread 0...
[ 1442.945855][T19218] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1442.945997][T19218] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1442.946278][T19218] bridge_slave_0: entered allmulticast mode
[ 1442.949393][T19218] bridge_slave_0: entered promiscuous mode
[ 1442.997971][T19218] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1442.998177][T19218] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1442.998553][T19218] bridge_slave_1: entered allmulticast mode
[ 1443.001608][T19218] bridge_slave_1: entered promiscuous mode
[ 1443.055526][T19318] IPVS: using max 7 ests per chain, 16800 per kthread
[ 1443.126083][T19218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1443.186878][T19218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1443.351468][T19218] team0: Port device team_slave_0 added
[ 1443.376759][T19327] overlayfs: missing 'lowerdir'
[ 1443.379633][T19218] team0: Port device team_slave_1 added
[ 1445.583968][  T994] usb 8-1: new high-speed USB device number 57 using dummy_hcd
[ 1445.864589][  T994] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1445.864624][  T994] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[ 1445.874370][  T994] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1445.874400][  T994] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1445.874419][  T994] usb 8-1: Product: syz
[ 1445.874432][  T994] usb 8-1: Manufacturer: syz
[ 1445.874445][  T994] usb 8-1: SerialNumber: syz
[ 1445.916078][  T994] usb 8-1: config 0 descriptor??
[ 1445.978800][T19218] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1445.978819][T19218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1445.978846][T19218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1445.993963][ T6127] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 1446.131842][    C1] sd 0:0:1:0: [sda] tag#736 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 1446.131904][    C1] sd 0:0:1:0: [sda] tag#736 CDB: Read(6) 08 00 00 00 00 00
[ 1446.156272][ T6127] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1446.156304][ T6127] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1446.156324][ T6127] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1446.156389][ T6127] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1446.161220][ T6127] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1446.161253][ T6127] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1446.161273][ T6127] usb 6-1: Product: syz
[ 1446.161287][ T6127] usb 6-1: Manufacturer: syz
[ 1446.251775][T19218] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1446.251796][T19218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1446.251824][T19218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1446.332243][ T6127] cdc_wdm 6-1:1.0: skipping garbage
[ 1446.332268][ T6127] cdc_wdm 6-1:1.0: skipping garbage
[ 1446.353739][ T6127] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1446.353799][ T6127] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1446.667703][ T6127] usb 6-1: USB disconnect, device number 51
[ 1447.524658][  T994] usb 8-1: USB disconnect, device number 57
[ 1447.806362][T17669] udevd[17669]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1448.069115][T19218] hsr_slave_0: entered promiscuous mode
[ 1448.070630][T19218] hsr_slave_1: entered promiscuous mode
[ 1448.071953][T19218] debugfs: 'hsr0' already exists in 'hsr'
[ 1448.071979][T19218] Cannot create hsr debugfs directory
[ 1448.154784][T14408] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 1448.428403][T14408] usb 2-1: Using ep0 maxpacket: 16
[ 1448.444856][T14408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1448.444893][T14408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1448.444917][T14408] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1448.444964][T14408] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1448.444997][T14408] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1448.494662][T14408] usb 2-1: config 0 descriptor??
[ 1448.703931][T16958] hsr_slave_0: left promiscuous mode
[ 1448.779604][T16958] hsr_slave_1: left promiscuous mode
[ 1448.790285][T16958] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1448.927342][T14408] shield 0003:0955:7214.0011: unknown main item tag 0x0
[ 1448.927383][T14408] shield 0003:0955:7214.0011: unknown main item tag 0x0
[ 1448.927411][T14408] shield 0003:0955:7214.0011: unknown main item tag 0x0
[ 1448.927437][T14408] shield 0003:0955:7214.0011: unknown main item tag 0x0
[ 1448.927462][T14408] shield 0003:0955:7214.0011: unknown main item tag 0x0
[ 1448.932522][T14408] input: HID 0955:7214 Haptics as /devices/virtual/input/input30
[ 1448.954941][T16958] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1449.227316][T14408] shield 0003:0955:7214.0011: Registered Thunderstrike controller
[ 1449.227686][T14408] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0
[ 1449.425837][T19360] random: crng reseeded on system resumption
[ 1449.477825][T18326] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1449.478178][T18326] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1449.478520][T18326] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1449.478616][ T8483] usb 2-1: USB disconnect, device number 60
[ 1449.478851][T18326] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1449.600476][ T8483] ------------[ cut here ]------------
[ 1449.600492][ T8483] workqueue: work disable count underflowed
[ 1449.600499][ T8483] WARNING: kernel/workqueue.c:4410 at enable_work+0x1c7/0x230, CPU#1: kworker/1:11/8483
[ 1449.600567][ T8483] Modules linked in:
[ 1449.600588][ T8483] CPU: 1 UID: 0 PID: 8483 Comm: kworker/1:11 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1449.600664][ T8483] Tainted: [L]=SOFTLOCKUP
[ 1449.600671][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1449.600685][ T8483] Workqueue: usb_hub_wq hub_event
[ 1449.600757][ T8483] RIP: 0010:enable_work+0x1c7/0x230
[ 1449.600807][ T8483] Code: bf be 36 00 4d 85 f6 75 48 e8 b5 be 36 00 eb 47 e8 ae be 36 00 90 0f 0b 90 e9 bc fe ff ff e8 a0 be 36 00 48 8d 3d f9 70 df 0d <67> 48 0f b9 3a e9 d2 fe ff ff e8 8a be 36 00 90 0f 0b 90 e9 1d ff
[ 1449.600828][ T8483] RSP: 0018:ffffc9000da3f018 EFLAGS: 00010087
[ 1449.600871][ T8483] RAX: ffffffff818dc7d0 RBX: 0000000000000000 RCX: 0000000000100000
[ 1449.600887][ T8483] RDX: ffffc9001f1ef000 RSI: 00000000000071ec RDI: ffffffff8f6d38d0
[ 1449.600904][ T8483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1449.600915][ T8483] R10: dffffc0000000000 R11: ffffed1007a27115 R12: 1ffff11007a27114
[ 1449.600929][ T8483] R13: 001fffffffc00001 R14: ffff88803d1388a0 R15: 0000000000000000
[ 1449.600945][ T8483] FS:  0000000000000000(0000) GS:ffff888126436000(0000) knlGS:0000000000000000
[ 1449.600962][ T8483] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1449.600976][ T8483] CR2: 0000001b2ec21ff8 CR3: 0000000037fac000 CR4: 00000000003526f0
[ 1449.600997][ T8483] Call Trace:
[ 1449.601005][ T8483]  <TASK>
[ 1449.601021][ T8483]  __cancel_work_sync+0xf7/0x110
[ 1449.601048][ T8483]  thermal_zone_device_unregister+0x23e/0x3f0
[ 1449.601143][ T8483]  power_supply_unregister+0xf9/0x140
[ 1449.601205][ T8483]  ? __pfx_shield_remove+0x10/0x10
[ 1449.601278][ T8483]  shield_remove+0x72/0x120
[ 1449.601303][ T8483]  hid_device_remove+0x22b/0x370
[ 1449.601387][ T8483]  ? __pfx_hid_device_remove+0x10/0x10
[ 1449.601421][ T8483]  device_release_driver_internal+0x46f/0x870
[ 1449.601501][ T8483]  bus_remove_device+0x45a/0x570
[ 1449.601534][ T8483]  ? __pfx_bus_remove_device+0x10/0x10
[ 1449.601554][ T8483]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1449.601599][ T8483]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1449.601672][ T8483]  device_del+0x52b/0x900
[ 1449.601731][ T8483]  ? reacquire_held_locks+0x104/0x190
[ 1449.601774][ T8483]  ? __pfx_device_del+0x10/0x10
[ 1449.601800][ T8483]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1449.601837][ T8483]  ? rt_spin_unlock+0x14f/0x200
[ 1449.601872][ T8483]  hid_destroy_device+0x6b/0x1b0
[ 1449.601911][ T8483]  usbhid_disconnect+0x9f/0xc0
[ 1449.601969][ T8483]  usb_unbind_interface+0x26e/0x910
[ 1449.602027][ T8483]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1449.602058][ T8483]  ? __pfx_usb_unbind_interface+0x10/0x10
[ 1449.602091][ T8483]  device_release_driver_internal+0x4d9/0x870
[ 1449.602131][ T8483]  bus_remove_device+0x45a/0x570
[ 1449.602162][ T8483]  ? __pfx_bus_remove_device+0x10/0x10
[ 1449.602184][ T8483]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1449.602207][ T8483]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1449.602251][ T8483]  device_del+0x52b/0x900
[ 1449.602291][ T8483]  ? __pfx_device_del+0x10/0x10
[ 1449.602319][ T8483]  ? kobject_put+0x51d/0x560
[ 1449.602382][ T8483]  usb_disable_device+0x3d4/0x8d0
[ 1449.602419][ T8483]  usb_disconnect+0x315/0x970
[ 1449.602453][ T8483]  hub_event+0x1cf9/0x4f60
[ 1449.602537][ T8483]  ? __pfx_hub_event+0x10/0x10
[ 1449.602580][ T8483]  ? process_scheduled_works+0xa8d/0x18c0
[ 1449.602609][ T8483]  ? process_scheduled_works+0xa8d/0x18c0
[ 1449.602644][ T8483]  process_scheduled_works+0xb6e/0x18c0
[ 1449.602716][ T8483]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1449.602757][ T8483]  ? assign_work+0x3d5/0x5e0
[ 1449.602795][ T8483]  worker_thread+0xa53/0xfc0
[ 1449.602860][ T8483]  kthread+0x388/0x470
[ 1449.602886][ T8483]  ? __pfx_worker_thread+0x10/0x10
[ 1449.602914][ T8483]  ? __pfx_kthread+0x10/0x10
[ 1449.602942][ T8483]  ret_from_fork+0x51e/0xb90
[ 1449.602977][ T8483]  ? __pfx_ret_from_fork+0x10/0x10
[ 1449.603007][ T8483]  ? __switch_to+0xc7d/0x1450
[ 1449.603075][ T8483]  ? __pfx_kthread+0x10/0x10
[ 1449.603101][ T8483]  ret_from_fork_asm+0x1a/0x30
[ 1449.603160][ T8483]  </TASK>
[ 1449.603172][ T8483] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1449.603194][ T8483] CPU: 1 UID: 0 PID: 8483 Comm: kworker/1:11 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1449.603234][ T8483] Tainted: [L]=SOFTLOCKUP
[ 1449.603243][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1449.603258][ T8483] Workqueue: usb_hub_wq hub_event
[ 1449.603288][ T8483] Call Trace:
[ 1449.603297][ T8483]  <TASK>
[ 1449.603306][ T8483]  vpanic+0x56c/0xa60
[ 1449.603356][ T8483]  ? __pfx__printk+0x10/0x10
[ 1449.603382][ T8483]  ? __pfx_vpanic+0x10/0x10
[ 1449.603415][ T8483]  ? is_bpf_text_address+0x292/0x2b0
[ 1449.603450][ T8483]  ? is_bpf_text_address+0x26/0x2b0
[ 1449.603494][ T8483]  panic+0xc5/0xd0
[ 1449.603527][ T8483]  ? __pfx_panic+0x10/0x10
[ 1449.603575][ T8483]  ? ret_from_fork_asm+0x1a/0x30
[ 1449.603605][ T8483]  __warn+0x315/0x4f0
[ 1449.603635][ T8483]  ? enable_work+0x1c7/0x230
[ 1449.603661][ T8483]  ? enable_work+0x1c7/0x230
[ 1449.603685][ T8483]  __report_bug+0x29a/0x540
[ 1449.603744][ T8483]  ? enable_work+0x1c7/0x230
[ 1449.603771][ T8483]  ? __pfx___report_bug+0x10/0x10
[ 1449.603804][ T8483]  ? __flush_work+0xb9e/0xda0
[ 1449.603831][ T8483]  report_bug_entry+0x19a/0x290
[ 1449.603854][ T8483]  ? enable_work+0x1c7/0x230
[ 1449.603872][ T8483]  ? enable_work+0x1cc/0x230
[ 1449.603893][ T8483]  handle_bug+0xce/0x200
[ 1449.603998][ T8483]  exc_invalid_op+0x1a/0x50
[ 1449.604027][ T8483]  asm_exc_invalid_op+0x1a/0x20
[ 1449.604075][ T8483] RIP: 0010:enable_work+0x1c7/0x230
[ 1449.604099][ T8483] Code: bf be 36 00 4d 85 f6 75 48 e8 b5 be 36 00 eb 47 e8 ae be 36 00 90 0f 0b 90 e9 bc fe ff ff e8 a0 be 36 00 48 8d 3d f9 70 df 0d <67> 48 0f b9 3a e9 d2 fe ff ff e8 8a be 36 00 90 0f 0b 90 e9 1d ff
[ 1449.604118][ T8483] RSP: 0018:ffffc9000da3f018 EFLAGS: 00010087
[ 1449.604137][ T8483] RAX: ffffffff818dc7d0 RBX: 0000000000000000 RCX: 0000000000100000
[ 1449.604154][ T8483] RDX: ffffc9001f1ef000 RSI: 00000000000071ec RDI: ffffffff8f6d38d0
[ 1449.604169][ T8483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1449.604182][ T8483] R10: dffffc0000000000 R11: ffffed1007a27115 R12: 1ffff11007a27114
[ 1449.604198][ T8483] R13: 001fffffffc00001 R14: ffff88803d1388a0 R15: 0000000000000000
[ 1449.604233][ T8483]  ? enable_work+0x1c0/0x230
[ 1449.604265][ T8483]  ? enable_work+0x1c0/0x230
[ 1449.604294][ T8483]  __cancel_work_sync+0xf7/0x110
[ 1449.604320][ T8483]  thermal_zone_device_unregister+0x23e/0x3f0
[ 1449.604356][ T8483]  power_supply_unregister+0xf9/0x140
[ 1449.604385][ T8483]  ? __pfx_shield_remove+0x10/0x10
[ 1449.604407][ T8483]  shield_remove+0x72/0x120
[ 1449.604433][ T8483]  hid_device_remove+0x22b/0x370
[ 1449.604472][ T8483]  ? __pfx_hid_device_remove+0x10/0x10
[ 1449.604510][ T8483]  device_release_driver_internal+0x46f/0x870
[ 1449.604551][ T8483]  bus_remove_device+0x45a/0x570
[ 1449.604584][ T8483]  ? __pfx_bus_remove_device+0x10/0x10
[ 1449.604606][ T8483]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1449.604631][ T8483]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1449.604667][ T8483]  device_del+0x52b/0x900
[ 1449.604702][ T8483]  ? reacquire_held_locks+0x104/0x190
[ 1449.604731][ T8483]  ? __pfx_device_del+0x10/0x10
[ 1449.604760][ T8483]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1449.604795][ T8483]  ? rt_spin_unlock+0x14f/0x200
[ 1449.604833][ T8483]  hid_destroy_device+0x6b/0x1b0
[ 1449.604870][ T8483]  usbhid_disconnect+0x9f/0xc0
[ 1449.604901][ T8483]  usb_unbind_interface+0x26e/0x910
[ 1449.604935][ T8483]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1449.604964][ T8483]  ? __pfx_usb_unbind_interface+0x10/0x10
[ 1449.604996][ T8483]  device_release_driver_internal+0x4d9/0x870
[ 1449.605038][ T8483]  bus_remove_device+0x45a/0x570
[ 1449.605070][ T8483]  ? __pfx_bus_remove_device+0x10/0x10
[ 1449.605091][ T8483]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1449.605116][ T8483]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1449.605152][ T8483]  device_del+0x52b/0x900
[ 1449.605193][ T8483]  ? __pfx_device_del+0x10/0x10
[ 1449.605228][ T8483]  ? kobject_put+0x51d/0x560
[ 1449.605269][ T8483]  usb_disable_device+0x3d4/0x8d0
[ 1449.605310][ T8483]  usb_disconnect+0x315/0x970
[ 1449.605347][ T8483]  hub_event+0x1cf9/0x4f60
[ 1449.605440][ T8483]  ? __pfx_hub_event+0x10/0x10
[ 1449.605481][ T8483]  ? process_scheduled_works+0xa8d/0x18c0
[ 1449.605513][ T8483]  ? process_scheduled_works+0xa8d/0x18c0
[ 1449.605547][ T8483]  process_scheduled_works+0xb6e/0x18c0
[ 1449.605618][ T8483]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1449.605660][ T8483]  ? assign_work+0x3d5/0x5e0
[ 1449.605699][ T8483]  worker_thread+0xa53/0xfc0
[ 1449.605767][ T8483]  kthread+0x388/0x470
[ 1449.605793][ T8483]  ? __pfx_worker_thread+0x10/0x10
[ 1449.605824][ T8483]  ? __pfx_kthread+0x10/0x10
[ 1449.605852][ T8483]  ret_from_fork+0x51e/0xb90
[ 1449.605888][ T8483]  ? __pfx_ret_from_fork+0x10/0x10
[ 1449.605919][ T8483]  ? __switch_to+0xc7d/0x1450
[ 1449.605955][ T8483]  ? __pfx_kthread+0x10/0x10
[ 1449.605980][ T8483]  ret_from_fork_asm+0x1a/0x30
[ 1449.606025][ T8483]  </TASK>
[ 1449.606533][ T8483] Kernel Offset: disabled