last executing test programs:

6.335442005s ago: executing program 4 (id=728):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

6.23457707s ago: executing program 4 (id=729):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
epoll_create1(0x0)
r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$IOCTL_VMCI_VERSION(r1, 0x79f, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x82)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'lblc\x00'}, 0x2c)
getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68)
r4 = socket$kcm(0x29, 0x5, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg$inet(r4, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846c0513c1d9af3f721cad5a7a753816b79e9af459a7719536932401f194b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d30c5e7", 0xd8}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x88}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0xfffffee6}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}, {&(0x7f0000001500)="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", 0xd0b}], 0x5}}], 0x2, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000bc0)=0x2, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r5, r0})
write(r4, 0x0, 0x0)

5.1738314s ago: executing program 2 (id=733):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2d, 0x4, 0x0, 0x0, 0xb4, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2, 0xfffffffe}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000091401001000786895770000040001"], 0x20}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r4 = dup(r1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
dup3(r5, r2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r7 = accept$alg(r6, 0x0, 0x0)
write$binfmt_elf64(r7, &(0x7f00000003c0)=ANY=[], 0x100000530)
recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xf07, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0xf, 0x7000000}}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x10}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

5.114073178s ago: executing program 1 (id=734):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008004)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000001c0))
r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40580)
ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f00000000c0)={0x8000005, 0x0, "679c51ecbc83d1e22e845e3ede57135adc714d432546da16827000"})
r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
pread64(r4, 0x0, 0x0, 0x7fff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r8}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r9 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x0, 0x34000000, @local}}}, 0x88)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r10, 0x400455c8, 0x4)

5.038618853s ago: executing program 4 (id=735):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x18, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

4.810828977s ago: executing program 4 (id=736):
rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000100))
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
read(r0, &(0x7f00000002c0)=""/319, 0x13f)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000025000000bf0900000000000055090100030000009500000000000000bf91000000000000b7020000000000008500000095000000b700000000000000950000000000000017574442430ea5ed980ba729791f18a8fca414df12300aee53005b30dfba04bc20f0f97ae2f7ba0511bfb9b740265e5be427e2db570044c62d6a5e75dbf641ba323cb4713d8edc421749ccbcd622c9"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000140)="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"/297, 0x3accf8d5)
close(r1)

4.112565942s ago: executing program 2 (id=739):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xdc}}, 0x0)

3.851986918s ago: executing program 0 (id=740):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000200)=0x5, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

3.823868559s ago: executing program 2 (id=741):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x802c542a, 0xffffffffffffffff)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x0, 0x0)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004)

3.618285879s ago: executing program 2 (id=743):
r0 = socket(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6}, 0x38)
close(r0)
socketpair$tipc(0x1e, 0x0, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x34}]}, &(0x7f0000002100)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

3.575553165s ago: executing program 4 (id=744):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140))
io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0xff39)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x10200, 0x0)
ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000240)=0x8)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101}, 0x20}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000120001000000000000000000e000000200000000000000000000000000000000000033000c0015"], 0x48}}, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0x3}]})
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r9, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
close_range(r8, 0xffffffffffffffff, 0x0)

3.389648303s ago: executing program 3 (id=745):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
epoll_create1(0x0)
r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$IOCTL_VMCI_VERSION(r1, 0x79f, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x82)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'lblc\x00'}, 0x2c)
getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68)
r4 = socket$kcm(0x29, 0x5, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg$inet(r4, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846c0513c1d9af3f721cad5a7a753816b79e9af459a7719536932401f194b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d30c5e7", 0xd8}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x88}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0xfffffee6}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}, {&(0x7f0000001500)="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", 0xd0b}], 0x5}}], 0x2, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000bc0)=0x2, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r5, r0})
write(r4, 0x0, 0x0)

2.875615283s ago: executing program 0 (id=746):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x1a, 0x115, 0x0, 0x0, {0x2}, [@RTA_UID={0x8}]}, 0x24}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

2.569275113s ago: executing program 2 (id=747):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x0, 0x2})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="278ccad80010b15bf557e680f6a967e3687043908568789de8f39c7ca80b2ab5959ce9b24bd1d54ccc1b07ee08ebaf131b171f1fda0b51dc2c81bdbf8f3ccfc633928da35a369273a0c1534b103e6fb08e133f02d99a7a2e40e6b9c32be1881eb0d9046fb70e1d845657fd9fad455af067d5478c34cf9a757d4fcb9ebcc947a0cb87e890df4e35d249ae", @ANYRES16=r5, @ANYBLOB="01000000000000000000030000000c0009800800020034000000"], 0x20}}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000005d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r7, 0xf0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xa)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4ff5677c1a"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x38}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r12, @ANYBLOB="2a003300d0d4fe00ffffffffffff080211000000505050505050"], 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'})

2.511572543s ago: executing program 4 (id=748):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})
r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006480)={0x2020}, 0x2020)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = syz_io_uring_setup(0x4ea1, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000080), &(0x7f00000000c0)=<r5=>0x0)
syz_io_uring_setup(0x5de, &(0x7f0000000200), &(0x7f0000000940)=<r6=>0x0, 0x0)
pause()
syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3})
io_uring_enter(r4, 0x1d2d, 0x0, 0x11, 0x0, 0x0)
write$char_usb(r3, &(0x7f0000000140)="83", 0x1)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x20)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
r7 = epoll_create1(0x0)
eventfd(0x0)
epoll_pwait(r7, &(0x7f0000000340)=[{}], 0x1, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c0000000101030f0000000000000000000000000400028008000840000000000c0019080000020040010000"], 0x2c}}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x5c1341, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})

2.393429719s ago: executing program 0 (id=749):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2d, 0x4, 0x0, 0x0, 0xb4, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2, 0xfffffffe}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000091401001000786895770000040001"], 0x20}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r4 = dup(r1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
dup3(r5, r2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r7 = accept$alg(r6, 0x0, 0x0)
write$binfmt_elf64(r7, &(0x7f00000003c0)=ANY=[], 0x100000530)
recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xf07, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0xf, 0x7000000}}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x10}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

2.163341675s ago: executing program 1 (id=750):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$inet(0x2, 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f00000006c0)="e000000000000107ff82762f86dd1f1fba2dff09007ad265128380", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x100000, @private1, 0x216}, 0x1c)
r3 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000280)={'\x00', 0x11, 0x8, 0x401})
r4 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="d4000000e851bad3cdc8f84ddb91bbd5a359316ef3a83f8337b0d69719b4f1d6b5d2465fb3649b9efe72f9967246c95497e1cd565a854bf6bce5760bcce68752195e26b4e8316c2b2b1146c84d33c15ed35ced4964178a4fc5c239a974a3dbee4c20024820aad779596b00dd8998a705dca89900a54e95c29e2446fc51c0a50f90df61fa636257b2e1f91c41ab91b669a55fa40331d7d3f1", @ANYRES16=r5, @ANYBLOB="010000000000000000000500000004000180bc000380b700040008feff0ee24b55c3e4b1b10376cfc8955b7af5a87e0238e016b0936f93f75fd3b03a23b1a6941c7e58dacfc0eda480d2f7193e9bfae57707337f65af02a69bfb437412f7fc76afd0532f0a7e7368184504c6e347cd0cd5435326078f90fcc38e87b2e1da85013ea6ec08a3f08b672e59e91c344984b3a4ff72838d4613a64236939cd68e3baa9aac20a326492a88d40ad5799177daf08599060d6841c9db40ce395e8adbd7217eb408483fcdfdc244266533f600"], 0xd4}}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000002c0)={0x80000, 0x1, 0xc63, 0xfff, 0x34}, 0x14)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x20)
setuid(0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESOCT=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)

2.162431638s ago: executing program 3 (id=751):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000280)={0xf000})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0))
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000500)={0x100000, 0x9883cc54e17de64b})

2.023826826s ago: executing program 3 (id=752):
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x0, 0x1, 0x0, &(0x7f0000000540)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0xf, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_usb_connect(0x0, 0x10e, &(0x7f0000000600)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff01000424020c9024"], 0x0)

1.96920635s ago: executing program 2 (id=753):
r0 = socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x0, 0x0, 0x4}], 0x10, 0x0, @void, @value}, 0x90)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x8a7}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0)
memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0xb, "0441b613a31ed707e2"}, @timestamp_addr={0x44, 0x4, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0)
r2 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r2, &(0x7f0000000a00)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000280)="c109000000000000001d1e010271261c", 0x10}], 0x1}, 0x0)
r3 = fanotify_init(0x200, 0x0)
r4 = memfd_create(&(0x7f0000001440)='-\x88\x8cG\xf3\xbd\xbd\xe2\xd0@\x1e\x8b\xf4\x87\xe5I\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdbQ\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x1e\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf8\xdah\x94:\x9cc\x10d\xee\xa7\x8b\x066\xb8G\xd1c\xe1$\xe8\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xf5\xcc\x82n=\x7f=\xcdJxR\xa5~\xb80a\xa9\xb2\x04K\x98\x93=\xabw\x05\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\x99=\x12\xb3\x15\x1b?\xd7\x95\xc4\x85y\xef\xef\xff\xff\xff\xff\xff\xff\xff\xff\xb3\x02\x03\x00\x00\x00\x00\x00\x00\x00\xf6\xed\xc7\x80\xa5Pj\xa4\x06', 0x0)
r5 = dup(r4)
fanotify_mark(r3, 0x1, 0x4000007b, r5, 0x0)
write$cgroup_pid(r5, &(0x7f0000000040), 0x12)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x4, 0xb3, 0x1, 0xa}, @lsrr={0x83, 0x3, 0x84}, @ra={0x94, 0x4, 0x1}]}}}}})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010600000000000000000900000024000480130001"], 0x38}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
connect(r2, &(0x7f0000000340)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

1.546831047s ago: executing program 1 (id=754):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x802c542a, 0xffffffffffffffff)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x0, 0x0)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004)

1.427568261s ago: executing program 1 (id=755):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
r4 = dup3(r2, r3, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x40189206, &(0x7f0000000140)={&(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f0000000100)=0x5, 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
syz_io_uring_setup(0x18a1, &(0x7f0000000240)={0x0, 0x8, 0x10100, 0x2, 0x0, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000500)=0xa, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0002}]})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
r9 = dup(r8)
ioctl$KVM_SET_MSRS(r9, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r6, @ANYRES64])

1.21200161s ago: executing program 3 (id=756):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x28, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

1.124743278s ago: executing program 0 (id=757):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@private1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x80}}, 0x0)

758.386268ms ago: executing program 3 (id=758):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0)
r1 = fanotify_init(0x200, 0x0)
memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
fanotify_mark(r1, 0x1, 0x48001059, 0xffffffffffffffff, 0x0)
r2 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0)
write$binfmt_elf32(r2, &(0x7f0000001840)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

720.428048ms ago: executing program 0 (id=759):
sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, &(0x7f0000000080)={0x0})
sigaltstack(&(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, 0x0)

299.534471ms ago: executing program 0 (id=760):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000))
r2 = syz_io_uring_setup(0xe2c, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f00000000c0))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000497000/0x4000)=nil, 0x7fffdfb68000}, 0x1})
pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)
r4 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000040))
sendmmsg$inet(r4, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="bd", 0x1}], 0x1}}], 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
io_uring_setup(0x1895, &(0x7f00000002c0))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xdc}}, 0x0)

270.466545ms ago: executing program 1 (id=761):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x57e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

210.771914ms ago: executing program 3 (id=762):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008004)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000001c0))
r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40580)
ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f00000000c0)={0x8000005, 0x0, "679c51ecbc83d1e22e845e3ede57135adc714d432546da16827000"})
r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
pread64(r4, 0x0, 0x0, 0x7fff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r8}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r9 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x0, 0x34000000, @local}}}, 0x88)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r10, 0x400455c8, 0x4)

0s ago: executing program 1 (id=763):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0))
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000500)={0x100000, 0x9883cc54e17de64b})

kernel console output (not intermixed with test programs):

ved in 2025, please contact the netdev mailing list
[  104.309927][ T5602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.372205][ T5308] usb 4-1: Using ep0 maxpacket: 8
[  104.397059][ T5308] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  104.419065][ T5308] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  104.460053][ T5308] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  104.490932][ T5308] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  104.506227][ T5308] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  104.537498][ T5308] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  104.547266][ T5308] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  104.568087][ T5602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.579447][ T5308] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  104.598165][ T5308] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  104.650052][ T5308] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  104.737206][ T5308] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  104.749106][ T5308] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  104.765627][ T5602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.782005][ T5308] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  104.794464][ T5308] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  104.805898][ T5308] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  104.861724][ T5308] usb 4-1: string descriptor 0 read error: -22
[  104.873620][ T5308] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  104.888484][ T5308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.011069][ T5308] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  105.069422][ T5602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.152367][ T5669] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.104'.
[  105.198794][ T5669] openvswitch: netlink: Tunnel attr 2 has unexpected len 13 expected 4
[  105.418874][ T5602] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  105.438953][   T25] usb 4-1: USB disconnect, device number 4
[  105.563280][ T5602] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  105.629169][ T5602] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  105.690201][ T5602] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  105.721255][ T5232] Bluetooth: hci5: command tx timeout
[  106.083801][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.177266][ T5602] 8021q: adding VLAN 0 to HW filter on device team0
[  106.213260][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.221222][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.270520][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.277713][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.857539][ T5704] kvm: emulating exchange as write
[  107.199631][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.383301][ T5717] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.116'.
[  107.396129][ T5602] veth0_vlan: entered promiscuous mode
[  107.398166][ T5717] openvswitch: netlink: Tunnel attr 2 has unexpected len 13 expected 4
[  107.437289][ T5602] veth1_vlan: entered promiscuous mode
[  107.592644][ T5602] veth0_macvtap: entered promiscuous mode
[  107.614606][ T5602] veth1_macvtap: entered promiscuous mode
[  107.694958][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.757593][ T5725] process 'syz.3.119' launched './file0' with NULL argv: empty string added
[  107.764552][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.811501][ T5232] Bluetooth: hci5: command tx timeout
[  107.834304][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.882842][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.908638][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.926300][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.939357][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.962202][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.992080][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.013106][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.052140][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.169001][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.225084][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.237547][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.250684][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.265800][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.279766][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.300274][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.321909][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.342096][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.371653][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.397551][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.434532][ T5602] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.449912][ T5602] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.461419][ T5602] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.470283][ T5602] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.480935][ T5312] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  108.652317][ T5746] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.126'.
[  108.685208][ T5746] openvswitch: netlink: Tunnel attr 2 has unexpected len 13 expected 4
[  108.700924][ T5312] usb 4-1: Using ep0 maxpacket: 8
[  108.719941][ T5312] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  108.744978][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  108.770139][ T5312] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  108.815514][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  108.849604][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.863629][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  108.878086][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.893730][ T5312] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  108.901896][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  108.918038][ T5312] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  108.932241][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  108.944056][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  108.962448][ T5312] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  108.973355][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  109.002437][ T5312] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  109.016536][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  109.032522][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  109.051458][ T5312] usb 4-1: string descriptor 0 read error: -22
[  109.067054][ T3025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.076117][ T5312] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  109.097090][ T3025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.107557][ T5312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.173066][ T5312] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  109.550891][ T5312] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  109.623374][ T5758] netlink: 'syz.4.129': attribute type 12 has an invalid length.
[  109.640106][ T5758] netlink: 'syz.4.129': attribute type 11 has an invalid length.
[  109.654751][ T5758] netlink: 190580 bytes leftover after parsing attributes in process `syz.4.129'.
[  109.740928][ T5312] usb 3-1: Using ep0 maxpacket: 8
[  109.763030][ T5312] usb 3-1: config 8 has an invalid interface number: 188 but max is 0
[  109.785386][ T5312] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  109.821234][ T5312] usb 3-1: config 8 has no interface number 0
[  109.847888][ T5312] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  109.869385][ T5312] usb 3-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  109.891580][ T5232] Bluetooth: hci5: command tx timeout
[  109.894527][ T5312] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[  109.909811][ T5312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.921535][ T5312] usb 3-1: Product: syz
[  109.925772][ T5312] usb 3-1: Manufacturer: syz
[  109.930508][ T5312] usb 3-1: SerialNumber: syz
[  109.991433][    T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  110.111090][  T941] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  110.201220][    T8] usb 5-1: Using ep0 maxpacket: 16
[  110.217493][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  110.231855][    T8] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  110.248097][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.261753][ T5775] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.82'.
[  110.264834][    T8] usb 5-1: config 0 descriptor??
[  110.276745][ T5775] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  110.323357][  T941] usb 2-1: config 0 has no interfaces?
[  110.329934][  T941] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  110.393595][  T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.428198][  T941] usb 2-1: config 0 descriptor??
[  110.534734][ T5312] vmk80xx 3-1:8.188: driver 'vmk80xx' failed to auto-configure device.
[  110.560428][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.129'.
[  110.583525][ T5312] usb 3-1: USB disconnect, device number 3
[  110.819222][ T5761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.845451][ T5761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.884170][ T5763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.911951][ T5763] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.950061][ T5785] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.137'.
[  110.971060][ T5785] openvswitch: netlink: Tunnel attr 2 has unexpected len 13 expected 4
[  111.226076][    T8] usbhid 5-1:0.0: can't add hid device: -71
[  111.242747][    T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  111.283083][    T8] usb 5-1: USB disconnect, device number 4
[  111.620941][ T5278] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  111.810923][ T5278] usb 3-1: Using ep0 maxpacket: 8
[  111.853208][ T5278] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.866979][ T5278] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=9f.c0
[  111.895502][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.904175][ T5278] usb 3-1: Product: syz
[  111.909100][ T5278] usb 3-1: Manufacturer: syz
[  111.914073][ T5278] usb 3-1: SerialNumber: syz
[  111.926161][ T5278] usb 3-1: config 0 descriptor??
[  111.945951][ T5278] usbserial_generic 3-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  111.971557][ T5278] usbserial_generic 3-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  112.016724][ T5278] usbserial_generic 3-1:0.0: device has no bulk endpoints
[  112.863901][ T5280] usb 2-1: USB disconnect, device number 8
[  113.231004][ T5308] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  113.440810][ T5308] usb 5-1: Using ep0 maxpacket: 32
[  113.455376][ T5308] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  113.473024][ T5308] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  113.505333][ T5308] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  113.541074][ T5308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.564691][ T5308] usb 5-1: Product: syz
[  113.576632][ T5308] usb 5-1: Manufacturer: syz
[  113.587515][ T5308] usb 5-1: SerialNumber: syz
[  113.671085][   T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  113.820011][ T5308] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  113.881052][   T25] usb 2-1: Using ep0 maxpacket: 8
[  113.900516][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  113.988165][   T25] usb 2-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1
[  114.052557][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.077945][   T25] usb 2-1: Product: syz
[  114.089137][   T25] usb 2-1: Manufacturer: syz
[  114.099365][   T25] usb 2-1: SerialNumber: syz
[  114.117106][   T25] usb 2-1: config 0 descriptor??
[  114.147147][   T25] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7
[  114.389957][  T941] usb 3-1: USB disconnect, device number 4
[  115.977670][  T941] usb 5-1: USB disconnect, device number 5
[  116.028990][  T941] usblp1: removed
[  116.280104][ T5312] usb 2-1: USB disconnect, device number 9
[  116.891616][ T5280] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  116.911197][ T5278] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  116.983270][   T29] audit: type=1326 audit(1725929806.412:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5852 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000
[  117.007542][   T29] audit: type=1326 audit(1725929806.412:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5852 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000
[  117.039529][   T29] audit: type=1326 audit(1725929806.412:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5852 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f612757def9 code=0x7ffc0000
[  117.070454][   T29] audit: type=1326 audit(1725929806.412:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5852 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000
[  117.096129][   T29] audit: type=1326 audit(1725929806.412:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5852 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000
[  117.101551][ T5280] usb 1-1: Using ep0 maxpacket: 8
[  117.135867][ T5278] usb 5-1: config 0 has no interfaces?
[  117.141789][ T5278] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  117.152167][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.162796][ T5280] usb 1-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02
[  117.173251][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.182647][ T5278] usb 5-1: config 0 descriptor??
[  117.216034][ T5280] usb 1-1: config 0 descriptor??
[  117.239497][ T5280] ums-alauda 1-1:0.0: USB Mass Storage device detected
[  117.614253][ T5850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.642378][ T5850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.689969][ T5870] syz.1.162 uses obsolete (PF_INET,SOCK_PACKET)
[  118.017229][  T941] usb 1-1: USB disconnect, device number 6
[  118.270920][   T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  118.481102][   T25] usb 2-1: Using ep0 maxpacket: 32
[  118.493683][   T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  118.514199][   T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  118.553680][   T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  118.580871][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.610809][   T25] usb 2-1: Product: syz
[  118.615030][   T25] usb 2-1: Manufacturer: syz
[  118.635773][   T25] usb 2-1: SerialNumber: syz
[  118.864597][   T25] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  119.056532][ T5241] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  119.069966][ T5241] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  119.081603][ T5241] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  119.091980][ T5280] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  119.116407][ T5241] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  119.125319][ T5241] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  119.136499][ T5241] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  119.290934][ T5280] usb 3-1: Using ep0 maxpacket: 8
[  119.316201][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  119.355310][ T5280] usb 3-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1
[  119.384969][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.410457][ T5280] usb 3-1: Product: syz
[  119.415193][ T5280] usb 3-1: Manufacturer: syz
[  119.423282][ T5280] usb 3-1: SerialNumber: syz
[  119.443333][ T5280] usb 3-1: config 0 descriptor??
[  119.506028][ T5280] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8
[  119.729303][ T5893] chnl_net:caif_netlink_parms(): no params data found
[  119.787751][  T941] usb 5-1: USB disconnect, device number 6
[  120.475111][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.512481][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.527897][ T5893] bridge_slave_0: entered allmulticast mode
[  120.537466][ T5893] bridge_slave_0: entered promiscuous mode
[  120.555961][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.581120][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.603627][ T5893] bridge_slave_1: entered allmulticast mode
[  120.630985][ T5893] bridge_slave_1: entered promiscuous mode
[  120.787926][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.841507][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  121.002708][ T5893] team0: Port device team_slave_0 added
[  121.051235][ T5308] usb 2-1: USB disconnect, device number 10
[  121.051526][ T5893] team0: Port device team_slave_1 added
[  121.096577][ T5308] usblp1: removed
[  121.241085][ T5232] Bluetooth: hci6: command tx timeout
[  121.355315][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.375314][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.410616][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.435048][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.444254][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.470925][ T5280] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  121.490651][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.503244][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.174'.
[  121.607435][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.174'.
[  121.661051][ T5280] usb 5-1: Using ep0 maxpacket: 32
[  121.675345][ T5280] usb 5-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7
[  121.685454][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.706055][  T941] usb 3-1: USB disconnect, device number 5
[  121.720469][ T5280] usb 5-1: Product: syz
[  121.748071][ T5280] usb 5-1: Manufacturer: syz
[  121.763573][ T5280] usb 5-1: SerialNumber: syz
[  121.786412][ T5280] usb 5-1: config 0 descriptor??
[  121.817322][ T5280] usb 5-1: bad CDC descriptors
[  121.835595][ T5893] hsr_slave_0: entered promiscuous mode
[  121.844358][ T5280] cp210x 5-1:0.0: cp210x converter detected
[  121.890155][ T5893] hsr_slave_1: entered promiscuous mode
[  121.942076][ T5893] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  121.979662][ T5893] Cannot create hsr debugfs directory
[  122.479408][ T5933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.540439][ T5933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.580896][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'.
[  122.803385][ T5280] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71
[  122.814692][ T5939] input: syz0 as /devices/virtual/input/input9
[  122.827009][ T5280] cp210x 5-1:0.0: querying part number failed
[  122.871323][ T5280] usb 5-1: cp210x converter now attached to ttyUSB0
[  122.907049][ T5280] usb 5-1: USB disconnect, device number 7
[  122.976533][ T5280] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  123.033782][ T5280] cp210x 5-1:0.0: device disconnected
[  123.094037][ T5939] Cannot find set identified by id 0 to match
[  123.222441][ T5893] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.320909][ T5232] Bluetooth: hci6: command tx timeout
[  123.383108][ T5893] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.677164][ T5893] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.894387][ T5893] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.070929][  T941] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  124.216968][ T5893] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  124.248929][ T5893] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  124.276604][ T5893] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  124.321071][  T941] usb 1-1: Using ep0 maxpacket: 32
[  124.321401][ T5312] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  124.338161][ T5893] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  124.356212][  T941] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  124.420348][  T941] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  124.470840][  T941] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  124.520278][  T941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.533125][ T5312] usb 2-1: Using ep0 maxpacket: 8
[  124.553267][  T941] usb 1-1: Product: syz
[  124.569319][  T941] usb 1-1: Manufacturer: syz
[  124.577743][ T5312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  124.595065][  T941] usb 1-1: SerialNumber: syz
[  124.636534][ T5312] usb 2-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1
[  124.664476][ T5312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.683923][ T5312] usb 2-1: Product: syz
[  124.690472][ T5312] usb 2-1: Manufacturer: syz
[  124.718950][ T5312] usb 2-1: SerialNumber: syz
[  124.744731][ T5312] usb 2-1: config 0 descriptor??
[  124.747972][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.766272][ T5312] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10
[  124.858333][ T5893] 8021q: adding VLAN 0 to HW filter on device team0
[  124.874846][  T941] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  124.933250][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.940455][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.027521][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.034889][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.400966][ T5232] Bluetooth: hci6: command tx timeout
[  126.015072][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.260361][ T5893] veth0_vlan: entered promiscuous mode
[  126.336246][ T5893] veth1_vlan: entered promiscuous mode
[  126.496795][ T5893] veth0_macvtap: entered promiscuous mode
[  126.515356][ T5893] veth1_macvtap: entered promiscuous mode
[  126.551340][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.562792][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.576890][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.623813][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.657326][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.688695][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.726430][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.745220][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.774118][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.835520][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.841008][  T941] usb 1-1: USB disconnect, device number 7
[  126.862398][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.917490][  T941] usblp1: removed
[  126.925570][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.964914][    T8] usb 2-1: USB disconnect, device number 11
[  126.982587][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.035037][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.061823][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.092180][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.120061][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.135009][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.149733][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.170324][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.183629][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.195657][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.206617][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.218308][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.230526][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.254245][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.404729][ T5893] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.439381][ T5893] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.467322][ T5893] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.480980][ T5232] Bluetooth: hci6: command tx timeout
[  127.496354][ T5893] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.577222][ T6006] xt_ecn: cannot match TCP bits for non-tcp packets
[  127.898681][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.944454][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.065374][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.096272][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.359038][ T6023] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0
[  128.580209][ T6028] netlink: 'syz.1.206': attribute type 12 has an invalid length.
[  128.608383][ T6028] netlink: 'syz.1.206': attribute type 11 has an invalid length.
[  128.618336][ T6028] netlink: 190580 bytes leftover after parsing attributes in process `syz.1.206'.
[  128.735913][ T6029] mmap: syz.4.205 (6029) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  128.963712][ T5312] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  129.191284][ T5312] usb 2-1: Using ep0 maxpacket: 16
[  129.208343][ T5312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  129.236290][ T5312] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  129.260417][ T5312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.277801][ T5312] usb 2-1: config 0 descriptor??
[  129.525648][   T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  129.602929][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'.
[  129.730977][   T25] usb 5-1: Using ep0 maxpacket: 8
[  129.755346][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  129.806851][   T25] usb 5-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1
[  129.821707][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.836733][   T25] usb 5-1: Product: syz
[  129.851038][   T25] usb 5-1: Manufacturer: syz
[  129.861125][   T25] usb 5-1: SerialNumber: syz
[  129.869708][ T6055] macvlan2: entered allmulticast mode
[  129.887299][   T25] usb 5-1: config 0 descriptor??
[  129.895285][ T6055] team_slave_0: entered promiscuous mode
[  129.901377][ T6055] team_slave_1: entered promiscuous mode
[  129.916590][ T6030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.934530][   T25] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11
[  129.945911][ T6055] team0: entered allmulticast mode
[  129.959351][ T6030] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.982747][ T6055] team_slave_0: entered allmulticast mode
[  130.099538][ T6055] team_slave_1: entered allmulticast mode
[  130.132859][ T6055] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  130.173305][ T6055] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  130.337566][ T6056] bond0: entered promiscuous mode
[  130.432120][ T6056] bond_slave_0: entered promiscuous mode
[  130.462779][ T6056] bond_slave_1: entered promiscuous mode
[  130.514063][ T6056] macvlan2: entered promiscuous mode
[  130.554611][ T6056] team0: entered promiscuous mode
[  130.985720][ T6066] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0
[  131.383576][ T5312] usbhid 2-1:0.0: can't add hid device: -71
[  131.423592][ T5312] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  131.435260][ T5312] usb 2-1: USB disconnect, device number 12
[  132.021058][  T941] usb 5-1: USB disconnect, device number 8
[  132.854885][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'.
[  132.879059][ T6105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.228'.
[  133.065767][ T6111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.229'.
[  133.168893][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  133.179266][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  133.304980][ T6115] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[  133.445323][ T6121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'.
[  133.475700][ T6121] netlink: 'syz.2.232': attribute type 25 has an invalid length.
[  133.539326][ T6121] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  133.548617][ T6121] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  133.557494][ T6121] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  133.566269][ T6121] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  133.588093][   T29] audit: type=1326 audit(1725929823.012:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6106 comm="syz.1.229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd37d17def9 code=0x0
[  134.050908][ T5280] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  134.109875][ T6107] infiniband syz2: set active
[  134.115338][ T6107] infiniband syz2: added team_slave_1
[  134.161469][ T6107] syz2: rxe_create_cq: returned err = -12
[  134.179028][ T6107] infiniband syz2: Couldn't create ib_mad CQ
[  134.207468][ T6107] infiniband syz2: Couldn't open port 1
[  134.241059][ T5280] usb 5-1: Using ep0 maxpacket: 8
[  134.267742][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  134.324318][ T5280] usb 5-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1
[  134.362861][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.390413][ T5280] usb 5-1: Product: syz
[  134.416519][ T5280] usb 5-1: Manufacturer: syz
[  134.436726][ T6139] vlan2: entered promiscuous mode
[  134.452799][ T6107] RDS/IB: syz2: added
[  134.457074][ T5280] usb 5-1: SerialNumber: syz
[  134.472256][ T6107] smc: adding ib device syz2 with port count 1
[  134.493404][ T5280] usb 5-1: config 0 descriptor??
[  134.509961][ T6139] bond0: entered promiscuous mode
[  134.518723][ T6107] smc:    ib device syz2 port 1 has pnetid 
[  134.537822][ T6139] bond_slave_0: entered promiscuous mode
[  134.560117][ T6139] bond_slave_1: entered promiscuous mode
[  134.568314][ T5280] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12
[  134.583165][ T6139] bond0: left promiscuous mode
[  134.606064][ T6139] bond_slave_0: left promiscuous mode
[  134.648545][ T6139] bond_slave_1: left promiscuous mode
[  135.269240][ T6147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.241'.
[  135.339268][ T6152] usb usb8: usbfs: process 6152 (syz.2.242) did not claim interface 0 before use
[  135.372091][   T29] audit: type=1326 audit(1725929824.802:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6151 comm="syz.2.242" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x0
[  135.830907][   T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  136.020801][   T25] usb 1-1: Using ep0 maxpacket: 32
[  136.058768][   T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  136.070172][   T25] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  136.106859][   T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  136.131218][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.167543][   T25] usb 1-1: Product: syz
[  136.186214][   T25] usb 1-1: Manufacturer: syz
[  136.209471][   T25] usb 1-1: SerialNumber: syz
[  136.464615][   T25] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  136.751964][   T25] usb 5-1: USB disconnect, device number 9
[  138.447816][ T6194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.254'.
[  138.603907][    T8] usb 1-1: USB disconnect, device number 8
[  138.664413][    T8] usblp1: removed
[  138.736538][ T6201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.256'.
[  138.747527][ T6201] netlink: 80 bytes leftover after parsing attributes in process `syz.2.256'.
[  138.827440][ T6204] netlink: 'syz.2.256': attribute type 10 has an invalid length.
[  138.868689][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.257'.
[  139.099295][ T6204] team0: Port device wlan1 added
[  139.441905][   T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  139.641097][   T25] usb 5-1: Using ep0 maxpacket: 8
[  139.655838][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  139.718721][   T25] usb 5-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1
[  139.744528][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.773303][   T25] usb 5-1: Product: syz
[  139.784362][   T25] usb 5-1: Manufacturer: syz
[  139.803088][   T25] usb 5-1: SerialNumber: syz
[  139.829788][   T25] usb 5-1: config 0 descriptor??
[  139.853772][   T25] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13
[  140.482297][  T941] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  140.673147][  T941] usb 2-1: config 0 has an invalid interface number: 156 but max is 1
[  140.683019][  T941] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[  140.707594][  T941] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  140.749783][  T941] usb 2-1: config 0 has no interface number 0
[  140.766233][  T941] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  140.781031][  T941] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  140.795190][  T941] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  140.849105][  T941] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  140.887188][  T941] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  140.910765][  T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.928081][  T941] usb 2-1: config 0 descriptor??
[  140.949216][  T941] gspca_main: spca561-2.14.0 probing abcd:cdee
[  141.194232][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.270'.
[  141.503144][  T941] spca561 2-1:0.156: probe with driver spca561 failed with error -22
[  141.551675][  T941] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  141.567059][  T941] usb 2-1: MIDIStreaming interface descriptor not found
[  142.108684][    T8] usb 5-1: USB disconnect, device number 10
[  143.121228][ T6276] Cannot find add_set index 0 as target
[  143.301948][  T941] usb 2-1: USB disconnect, device number 13
[  143.485822][ T6283] netdevsim netdevsim4: Direct firmware load for ng failed with error -2
[  143.495019][ T6283] netdevsim netdevsim4: Falling back to sysfs fallback for: ng
[  143.873253][ T6293] input: syz1 as /devices/virtual/input/input14
[  144.641211][ T6307] binder: 6304:6307 ioctl c018620c 20000180 returned -1
[  145.334047][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'.
[  146.198648][ T5278] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  146.394621][ T5278] usb 3-1: too many endpoints for config 0 interface 0 altsetting 48: 48, using maximum allowed: 30
[  146.460440][ T5278] usb 3-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  146.536752][ T5278] usb 3-1: config 0 interface 0 has no altsetting 0
[  146.571748][ T5278] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  146.713095][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.723896][ T5278] usb 3-1: Product: syz
[  146.728143][ T5278] usb 3-1: Manufacturer: syz
[  146.733729][ T5278] usb 3-1: SerialNumber: syz
[  146.758027][ T5278] usb 3-1: config 0 descriptor??
[  147.124017][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.310'.
[  147.544134][ T6385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.310'.
[  147.606383][ T5276] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  147.791056][ T5276] usb 2-1: Using ep0 maxpacket: 32
[  147.796963][ T5276] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  147.796998][ T5276] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  147.804213][ T5276] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  147.804252][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.804275][ T5276] usb 2-1: Product: syz
[  147.804293][ T5276] usb 2-1: Manufacturer: syz
[  147.804311][ T5276] usb 2-1: SerialNumber: syz
[  148.053234][ T5276] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  148.788731][ T5232] Bluetooth: hci6: Malformed LE Event: 0x1d
[  148.805722][ T6409] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  148.892605][ T5278] ch341 3-1:0.0: ch341-uart converter detected
[  148.933721][ T5278] usb 3-1: failed to receive control message: -71
[  148.963388][ T5278] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  148.995517][ T6409] team_slave_0: left allmulticast mode
[  149.023541][ T5278] usb 3-1: USB disconnect, device number 6
[  149.047225][ T6411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.062139][ T5278] ch341 3-1:0.0: device disconnected
[  149.108551][ T6411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.401196][ T6409] team0: Port device team_slave_0 removed
[  150.317286][ T5276] usb 2-1: USB disconnect, device number 14
[  150.375242][ T5276] usblp1: removed
[  150.412095][ T6427] netlink: 'syz.2.322': attribute type 1 has an invalid length.
[  152.374323][ T6459] netlink: 20 bytes leftover after parsing attributes in process `syz.4.333'.
[  152.469766][   T29] audit: type=1326 audit(1725929841.882:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.4.333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f002197def9 code=0x0
[  152.740809][ T5276] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  152.940773][ T5276] usb 1-1: Using ep0 maxpacket: 32
[  152.974050][ T5276] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  153.016169][ T5276] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  153.083343][ T5276] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  153.129161][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.169140][ T5276] usb 1-1: Product: syz
[  153.186142][ T5276] usb 1-1: Manufacturer: syz
[  153.249123][ T5276] usb 1-1: SerialNumber: syz
[  153.511902][ T5276] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  154.240978][ T5280] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  155.090806][ T5280] usb 5-1: Using ep0 maxpacket: 32
[  155.102183][ T5280] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  155.132275][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  155.150825][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  155.185949][ T6520] netlink: 24 bytes leftover after parsing attributes in process `syz.3.349'.
[  155.192676][ T5280] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  155.243938][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.274786][ T5280] usb 5-1: config 0 descriptor??
[  155.291688][ T6503] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  155.312342][ T5280] hub 5-1:0.0: USB hub found
[  155.330874][  T941] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  155.568324][  T941] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4
[  155.585843][  T941] usb 2-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0
[  155.635352][  T941] usb 2-1: Manufacturer: syz
[  155.669467][  T941] usb 2-1: config 0 descriptor??
[  155.821463][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'.
[  156.224263][  T941] gs_usb 2-1:0.0: Couldn't get device config: (err=-121)
[  156.258289][  T941] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121
[  156.431806][    T8] usb 1-1: USB disconnect, device number 9
[  156.462425][    T8] usblp1: removed
[  156.818607][   T25] usb 2-1: USB disconnect, device number 15
[  157.515896][ T5280] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[  157.545313][ T5280] usbhid 5-1:0.0: can't add hid device: -71
[  157.563829][ T5280] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  157.786288][ T5280] usb 5-1: USB disconnect, device number 11
[  159.440837][    T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  159.660236][    T8] usb 2-1: Using ep0 maxpacket: 32
[  159.696073][    T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  159.732225][    T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  159.764418][    T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  159.778360][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.818509][    T8] usb 2-1: Product: syz
[  159.838604][    T8] usb 2-1: Manufacturer: syz
[  159.849894][    T8] usb 2-1: SerialNumber: syz
[  160.141283][    T8] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  161.822105][ T6621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.851322][ T6621] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.275966][ T1178] Bluetooth: hci7: Frame reassembly failed (-84)
[  162.323291][ T1178] Bluetooth: hci7: Frame reassembly failed (-84)
[  162.708539][    T8] usb 2-1: USB disconnect, device number 16
[  162.750221][    T8] usblp1: removed
[  163.200905][ T5280] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  163.303157][ T6655] netlink: 'syz.4.383': attribute type 4 has an invalid length.
[  163.561370][ T5280] usb 1-1: Using ep0 maxpacket: 8
[  164.156123][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  164.188378][ T5280] usb 1-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1
[  164.201032][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.213840][ T5280] usb 1-1: Product: syz
[  164.218053][ T5280] usb 1-1: Manufacturer: syz
[  164.232163][ T5280] usb 1-1: SerialNumber: syz
[  164.240841][ T5280] usb 1-1: config 0 descriptor??
[  164.280839][ T5232] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  164.283876][ T5241] Bluetooth: hci7: command 0x1003 tx timeout
[  164.364934][ T5280] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15
[  165.605123][   T29] audit: type=1326 audit(1725929855.032:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6659 comm="syz.4.386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f002197def9 code=0x0
[  165.664819][ T6666] loop0: detected capacity change from 0 to 524287999
[  165.723608][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  165.733106][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  165.773400][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  165.782630][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  165.802963][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  165.812268][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  165.822229][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  165.831418][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  165.840370][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  165.849615][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  165.858087][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  165.867378][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  165.884217][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  165.893433][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  165.912872][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  165.922118][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  165.983615][ T6666] ldm_validate_partition_table(): Disk read failed.
[  166.035019][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  166.044392][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  166.059963][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  166.069328][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  166.088753][ T6666] Dev loop0: unable to read RDB block 0
[  166.136392][ T6666]  loop0: unable to read partition table
[  166.149745][ T6666] loop_reread_partitions: partition scan of loop0 (3��x��C�

) failed (rc=-5)
[  166.257435][ T6673] can: request_module (can-proto-0) failed.
[  166.570085][  T941] usb 1-1: USB disconnect, device number 10
[  166.628412][ T6688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.685951][ T6688] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.921150][ T6690] can: request_module (can-proto-0) failed.
[  169.648455][ T5232] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[  169.662917][ T5232] Bluetooth: hci6: Injecting HCI hardware error event
[  169.712579][ T5232] Bluetooth: hci6: hardware error 0x00
[  169.760870][   T12] Bluetooth: hci7: Frame reassembly failed (-84)
[  170.772258][ T5358] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  170.803744][ T6745] can: request_module (can-proto-0) failed.
[  170.972980][ T5358] usb 3-1: Using ep0 maxpacket: 8
[  171.004515][ T5358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  171.038479][ T5358] usb 3-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1
[  171.062107][ T5358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.115585][ T5358] usb 3-1: Product: syz
[  171.133482][ T5358] usb 3-1: Manufacturer: syz
[  171.141471][ T5358] usb 3-1: SerialNumber: syz
[  171.166550][ T5358] usb 3-1: config 0 descriptor??
[  171.184510][ T5358] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16
[  171.721206][ T5241] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  172.291164][ T5232] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  173.244792][ T6770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.272210][ T6770] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.367400][ T5308] usb 3-1: USB disconnect, device number 7
[  175.249916][ T6805] netlink: 'syz.1.424': attribute type 12 has an invalid length.
[  175.258501][ T6805] netlink: 'syz.1.424': attribute type 11 has an invalid length.
[  175.294533][ T6805] netlink: 190580 bytes leftover after parsing attributes in process `syz.1.424'.
[  175.338981][ T6807] x_tables: unsorted entry at hook 2
[  175.358677][ T6808] netlink: 'syz.2.422': attribute type 1 has an invalid length.
[  175.610991][ T5308] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  175.810759][ T5308] usb 2-1: Using ep0 maxpacket: 16
[  175.825284][ T5308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  175.840753][ T5308] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  175.849967][ T5308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.892871][ T5308] usb 2-1: config 0 descriptor??
[  176.733968][ T6806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.782385][ T6819] can: request_module (can-proto-0) failed.
[  176.816509][   T12] Bluetooth: hci7: Frame reassembly failed (-84)
[  176.842380][ T6806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.967407][ T5308] hid (null): nested delimiters
[  176.983493][ T5308] hid (null): nested delimiters
[  177.002659][ T5308] hid (null): nested delimiters
[  177.022491][ T5308] hid (null): report_id 2838798905 is invalid
[  177.045251][ T5308] hid (null): unknown global tag 0xc
[  177.077823][ T5308] hid (null): unknown global tag 0xa5
[  177.094917][ T5308] hid (null): unknown global tag 0xd
[  177.120591][ T5308] hid (null): unknown global tag 0xc
[  177.130980][ T5280] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  177.159906][ T5308] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1
[  177.210081][ T5308] hid-generic 0003:0158:0100.0002: unexpected long global item
[  177.294584][ T5308] hid-generic 0003:0158:0100.0002: probe with driver hid-generic failed with error -22
[  177.360877][ T5280] usb 5-1: Using ep0 maxpacket: 8
[  177.388167][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  177.427667][ T5280] usb 5-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1
[  177.446723][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.469113][ T5280] usb 5-1: Product: syz
[  177.478539][ T5280] usb 5-1: Manufacturer: syz
[  177.489395][ T5280] usb 5-1: SerialNumber: syz
[  177.517261][ T5280] usb 5-1: config 0 descriptor??
[  177.558462][ T5280] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17
[  177.657947][ T5308] usb 2-1: USB disconnect, device number 17
[  178.003348][ T6831] IPVS: stopping backup sync thread 6066 ...
[  178.841250][ T5232] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  179.340273][ T5280] usb 5-1: USB disconnect, device number 12
[  181.736173][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.441'.
[  181.939473][   T29] audit: type=1326 audit(1725929871.352:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6871 comm="syz.2.443" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x0
[  182.447647][   T62] Bluetooth: hci7: Frame reassembly failed (-84)
[  182.489638][ T5235] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  182.509646][ T5235] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  182.518851][ T5235] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  182.527929][ T5235] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  182.540957][ T5235] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  182.548435][ T5235] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  182.560784][    T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  182.752791][    T8] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[  182.798570][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.869609][    T8] usb 2-1: config 0 descriptor??
[  182.905303][    T8] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  184.444460][ T5241] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  184.608138][ T5235] Bluetooth: hci8: command tx timeout
[  184.831241][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'.
[  184.835079][ T6882] chnl_net:caif_netlink_parms(): no params data found
[  185.026476][ T5235] Bluetooth: hci4: link tx timeout
[  185.032435][ T5235] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  185.165518][    T8] gp8psk: usb in 128 operation failed.
[  185.174471][  T941] IPVS: starting estimator thread 0...
[  185.197640][    T8] gp8psk: usb in 137 operation failed.
[  185.219510][    T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  185.270855][ T6913] IPVS: using max 15 ests per chain, 36000 per kthread
[  185.299588][    T8] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[  185.352672][    T8] usb 2-1: media controller created
[  185.439010][ T6882] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.465081][ T6882] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.480122][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  185.504442][ T6882] bridge_slave_0: entered allmulticast mode
[  185.530158][ T6882] bridge_slave_0: entered promiscuous mode
[  185.542248][ T6882] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.580329][ T6882] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.609999][ T6882] bridge_slave_1: entered allmulticast mode
[  185.622298][ T6882] bridge_slave_1: entered promiscuous mode
[  185.642036][    T8] gp8psk_fe: Frontend attached
[  185.647659][    T8] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  185.709040][    T8] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  185.721021][ T5276] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  185.810117][ T6925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.874114][ T6882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.884541][ T6925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.912943][    T8] gp8psk: usb in 138 operation failed.
[  185.925843][ T6882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.932793][    T8] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[  185.953661][ T5276] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  185.971244][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.981339][    T8] gp8psk: found Genpix USB device pID = 203 (hex)
[  186.002784][ T5276] usb 5-1: config 0 descriptor??
[  186.114464][ T6882] team0: Port device team_slave_0 added
[  186.129429][ T6882] team0: Port device team_slave_1 added
[  186.239853][ T6882] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.280024][ T6882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.377336][ T6882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.410539][ T6882] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.420364][ T6882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.437105][ T6921] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722
[  186.465432][ T6882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.513528][ T6921] PKCS7: Only support pkcs7_signedData type
[  186.519606][ T5276] hackrf 5-1:0.0: Board ID: 00
[  186.540767][ T5276] hackrf 5-1:0.0: Firmware version: 
[  186.594027][ T6882] hsr_slave_0: entered promiscuous mode
[  186.606245][ T5276] hackrf 5-1:0.0: Registered as swradio16
[  186.629378][ T5276] hackrf 5-1:0.0: Registered as swradio17
[  186.639866][ T6882] hsr_slave_1: entered promiscuous mode
[  186.656104][ T5276] hackrf 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  186.676352][ T6882] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  186.684622][ T5235] Bluetooth: hci8: command tx timeout
[  186.728057][ T6882] Cannot create hsr debugfs directory
[  186.784705][   T46] usb 2-1: USB disconnect, device number 18
[  187.083742][ T5235] Bluetooth: hci4: command 0x0406 tx timeout
[  187.125255][   T46] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[  187.147865][ T6932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.457'.
[  187.165375][ T6933] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0
[  187.318633][ T5278] usb 5-1: USB disconnect, device number 13
[  187.694952][ T6882] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.856059][ T6882] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.268578][ T6882] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.761271][ T5241] Bluetooth: hci8: command tx timeout
[  189.065759][ T6947] input: syz1 as /devices/virtual/input/input18
[  189.178734][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'.
[  189.529430][ T5241] Bluetooth: hci4: unexpected event for opcode 0x2035
[  189.529858][ T6957] loop0: detected capacity change from 0 to 524287999
[  189.545662][ T6882] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.567417][    C1] blk_print_req_error: 7 callbacks suppressed
[  189.567432][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  189.582781][    C1] buffer_io_error: 7 callbacks suppressed
[  189.582792][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  189.645640][ T6961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.659631][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  189.668920][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  189.685376][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  189.694682][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  189.705849][ T6961] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.724131][    C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  189.733336][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  189.747082][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'.
[  189.763100][    C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  189.772404][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  189.780505][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  189.789715][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  189.798725][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  189.808007][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  189.817730][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  189.826993][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  189.835983][ T6957] ldm_validate_partition_table(): Disk read failed.
[  189.844339][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  189.853668][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  189.866802][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  189.876024][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  189.887350][ T6957] Dev loop0: unable to read RDB block 0
[  189.894593][ T6957]  loop0: unable to read partition table
[  189.905412][ T6957] loop_reread_partitions: partition scan of loop0 (3��x��C�

) failed (rc=-5)
[  189.937139][ T6955] bridge1: entered promiscuous mode
[  189.942783][ T6955] bridge1: entered allmulticast mode
[  190.356299][ T6882] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  190.399601][ T6882] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  190.517827][ T6882] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  190.580897][ T6882] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  190.840924][ T5241] Bluetooth: hci8: command tx timeout
[  191.055940][ T6882] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.068455][   T29] audit: type=1326 audit(1725929880.492:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000
[  191.141768][ T6882] 8021q: adding VLAN 0 to HW filter on device team0
[  191.148863][   T29] audit: type=1326 audit(1725929880.492:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000
[  191.185553][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.473'.
[  191.192804][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.201544][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.237398][   T29] audit: type=1326 audit(1725929880.492:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f612757def9 code=0x7ffc0000
[  191.299974][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.307285][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.370997][   T29] audit: type=1326 audit(1725929880.492:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000
[  191.409377][   T29] audit: type=1326 audit(1725929880.492:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000
[  191.447609][   T29] audit: type=1326 audit(1725929880.522:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f612757def9 code=0x7ffc0000
[  191.501044][ T5278] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  191.527942][   T29] audit: type=1326 audit(1725929880.522:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000
[  191.603399][   T29] audit: type=1326 audit(1725929880.522:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000
[  191.624726][    C1] vkms_vblank_simulate: vblank timer overrun
[  191.635003][   T29] audit: type=1326 audit(1725929880.522:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f612757def9 code=0x7ffc0000
[  191.656306][    C1] vkms_vblank_simulate: vblank timer overrun
[  191.690567][   T29] audit: type=1326 audit(1725929880.532:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000
[  191.725061][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  191.739192][ T6882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  191.750357][ T5278] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  191.801054][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  191.820092][ T5278] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  191.845759][ T5278] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  191.896497][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.940978][ T5278] usb 3-1: Product: syz
[  191.964048][ T5278] usb 3-1: Manufacturer: syz
[  191.992569][ T5278] usb 3-1: SerialNumber: syz
[  192.038825][ T5278] usb 3-1: config 0 descriptor??
[  192.070597][ T5278] ums-isd200 3-1:0.0: USB Mass Storage device detected
[  192.745344][    T8] IPVS: starting estimator thread 0...
[  192.862386][ T7010] IPVS: using max 25 ests per chain, 60000 per kthread
[  192.925348][ T7012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.478'.
[  193.053806][ T6882] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.181104][   T46] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  193.269478][ T6882] veth0_vlan: entered promiscuous mode
[  193.352531][ T6882] veth1_vlan: entered promiscuous mode
[  193.373540][   T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  193.409504][   T46] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  193.445614][   T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  193.455739][   T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  193.498461][   T46] usb 5-1: SerialNumber: syz
[  193.520059][   T46] usb 5-1: bad CDC descriptors
[  193.547118][ T6882] veth0_macvtap: entered promiscuous mode
[  193.561734][ T5241] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  193.571658][ T5241] Bluetooth: hci4: Injecting HCI hardware error event
[  193.580007][ T5235] Bluetooth: hci4: hardware error 0x00
[  193.611686][ T6882] veth1_macvtap: entered promiscuous mode
[  193.831980][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  193.875631][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.888407][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  193.907542][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.966017][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.051390][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.065676][ T5278] scsi host1: usb-storage 3-1:0.0
[  194.106872][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.148970][ T5278] usb 3-1: USB disconnect, device number 8
[  194.160811][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.212831][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.246990][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.280493][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.296084][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.296110][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.296129][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.312182][ T6882] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.593053][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.623863][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  194.644243][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  194.705366][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.740615][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.760074][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.770936][   T46] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  194.793705][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.810912][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.831051][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.848101][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.860341][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.872956][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.883679][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.898257][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.910876][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.925006][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.946615][ T5278] usb 5-1: USB disconnect, device number 14
[  194.977305][   T46] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  194.999604][ T6882] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.021139][   T46] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2
[  195.055502][ T6882] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.078080][ T6882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.087590][   T46] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84
[  195.108734][   T46] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  195.127791][ T6882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.137994][   T46] usb 2-1: Product: syz
[  195.150114][   T46] usb 2-1: SerialNumber: syz
[  195.154960][ T6882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.192977][   T46] option 2-1:7.0: GSM modem (1-port) converter detected
[  195.470103][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.506959][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.595316][ T5241] Bluetooth: hci4: unexpected Set CIG Parameters response data
[  195.603044][ T5241] Bluetooth: hci4: unexpected event for opcode 0x2062
[  195.695612][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.724534][ T5235] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  195.740335][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.202421][   T46] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  196.431485][ T5276] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  196.459557][   T46] usb 5-1: Using ep0 maxpacket: 8
[  196.485842][   T46] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89
[  196.508085][   T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  196.534272][   T46] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  196.553159][   T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.575834][   T46] usb 5-1: Product: syz
[  196.583452][   T46] usb 5-1: Manufacturer: syz
[  196.595748][   T46] usb 5-1: SerialNumber: syz
[  196.630375][   T46] usb 5-1: config 0 descriptor??
[  196.643334][ T5276] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  196.665811][   T46] streamzap 5-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0204
[  196.673292][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.751379][ T5276] usb 1-1: config 0 descriptor??
[  196.780457][ T5276] gspca_main: spca508-2.14.0 probing 8086:0110
[  196.931337][ T7064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.958239][ T7064] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.038077][ T5276] gspca_spca508: reg_read err -32
[  197.316990][ T7073] loop0: detected capacity change from 0 to 524287999
[  197.358252][ T5307] usb 2-1: USB disconnect, device number 19
[  197.379639][ T5307] option 2-1:7.0: device disconnected
[  197.412065][    C0] blk_print_req_error: 7 callbacks suppressed
[  197.412090][    C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  197.427546][    C0] buffer_io_error: 7 callbacks suppressed
[  197.427594][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  197.473544][    C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  197.482851][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  197.491885][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  197.501206][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  197.509776][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  197.519103][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  197.529982][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  197.539295][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  197.548430][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  197.557730][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  197.572209][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  197.581455][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  197.589637][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  197.598859][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  197.608486][ T7073] ldm_validate_partition_table(): Disk read failed.
[  197.616207][    C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  197.625615][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[  197.633785][    C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  197.643013][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[  197.661759][ T7073] Dev loop0: unable to read RDB block 0
[  197.673197][ T7073]  loop0: unable to read partition table
[  197.688444][ T7073] loop_reread_partitions: partition scan of loop0 (3��x��C�

) failed (rc=-5)
[  197.780844][ T5276] gspca_spca508: reg_read err -71
[  197.793527][ T5276] gspca_spca508: reg write: error -71
[  197.819968][ T5276] spca508 1-1:0.0: probe with driver spca508 failed with error -71
[  197.872738][ T5276] usb 1-1: USB disconnect, device number 11
[  198.816274][ T7090] netlink: 'syz.2.500': attribute type 1 has an invalid length.
[  198.902189][ T5276] usb 5-1: USB disconnect, device number 15
[  199.982459][ T7118] loop0: detected capacity change from 0 to 524287999
[  200.018157][ T7118] ldm_validate_partition_table(): Disk read failed.
[  200.025946][ T7118] Dev loop0: unable to read RDB block 0
[  200.061186][ T7118]  loop0: unable to read partition table
[  200.107186][ T7118] loop_reread_partitions: partition scan of loop0 (3��x��C�

) failed (rc=-5)
[  200.270841][ T5307] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  200.491231][ T5307] usb 3-1: Using ep0 maxpacket: 8
[  200.513810][ T5307] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  200.545255][ T5307] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  200.565660][ T5307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.639442][ T5307] IPVS: starting estimator thread 0...
[  200.710954][ T5276] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  200.740961][ T7133] IPVS: using max 24 ests per chain, 57600 per kthread
[  200.890902][ T5276] usb 5-1: Using ep0 maxpacket: 32
[  200.902697][ T5276] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.928440][ T5276] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  200.941947][ T5276] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  200.960506][ T5276] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  200.990807][ T5276] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  200.999239][ T5276] usb 5-1: Product: syz
[  201.006323][ T5276] usb 5-1: Manufacturer: syz
[  201.016770][ T5276] usb 5-1: SerialNumber: syz
[  201.058841][ T5276] appletouch 5-1:1.0: Could not find int-in endpoint
[  201.070349][ T5276] appletouch 5-1:1.0: probe with driver appletouch failed with error -5
[  201.118140][ T5276] usbhid 5-1:1.0: couldn't find an input interrupt endpoint
[  201.272499][   T46] usb 5-1: USB disconnect, device number 16
[  201.321640][ T5245] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  201.331954][ T5245] Bluetooth: hci5: Injecting HCI hardware error event
[  201.340469][ T5245] Bluetooth: hci5: hardware error 0x00
[  201.355018][ T7143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.515'.
[  201.671016][ T5276] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  201.801064][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  201.805848][ T5244] Bluetooth: hci3: command 0x0406 tx timeout
[  201.812363][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  201.819257][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  201.880893][ T5276] usb 1-1: Using ep0 maxpacket: 32
[  201.915647][ T5276] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  201.939402][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.957407][ T5276] usb 1-1: config 0 descriptor??
[  201.979228][ T5276] gspca_main: sq930x-2.14.0 probing 041e:403c
[  202.311009][ T5280] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  202.530868][ T5280] usb 2-1: Using ep0 maxpacket: 8
[  202.542234][ T5280] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13
[  202.567617][ T5280] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  202.584727][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.623123][ T5280] usb 2-1: Product: syz
[  202.640196][ T5280] usb 2-1: Manufacturer: syz
[  202.652218][ T5280] usb 2-1: SerialNumber: syz
[  202.673436][ T5280] usb 2-1: config 0 descriptor??
[  202.705281][ T5280] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  202.993637][   T46] usb 3-1: USB disconnect, device number 9
[  203.000602][ T5276] gspca_sq930x: ucbus_write failed -71
[  203.013361][ T5276] sq930x 1-1:0.0: probe with driver sq930x failed with error -71
[  203.039699][ T5276] usb 1-1: USB disconnect, device number 12
[  203.401612][ T5245] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  203.744892][ T7182] netlink: 'syz.4.527': attribute type 12 has an invalid length.
[  203.767675][ T7182] netlink: 'syz.4.527': attribute type 11 has an invalid length.
[  203.777202][ T7182] netlink: 190580 bytes leftover after parsing attributes in process `syz.4.527'.
[  203.945765][ T5280] gspca_zc3xx: reg_w_i err -71
[  204.021061][   T46] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  204.043665][ T5245] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0
[  204.052600][ T5245] Bluetooth: hci8: Injecting HCI hardware error event
[  204.061507][ T5235] Bluetooth: hci8: hardware error 0x00
[  204.131242][ T5276] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  204.205635][   T46] usb 1-1: Using ep0 maxpacket: 32
[  204.226004][   T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.242333][   T46] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  204.255817][   T46] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  204.277013][   T46] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  204.288330][   T46] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  204.300609][   T46] usb 1-1: Product: syz
[  204.304906][   T46] usb 1-1: Manufacturer: syz
[  204.309651][   T46] usb 1-1: SerialNumber: syz
[  204.325411][   T46] appletouch 1-1:1.0: Could not find int-in endpoint
[  204.337023][   T46] appletouch 1-1:1.0: probe with driver appletouch failed with error -5
[  204.350928][ T5276] usb 5-1: Using ep0 maxpacket: 16
[  204.352753][   T46] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  204.376657][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  204.406250][ T7191] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[  204.424243][ T5276] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  204.440794][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.485845][ T5276] usb 5-1: config 0 descriptor??
[  204.546121][   T46] usb 1-1: USB disconnect, device number 13
[  204.622345][ T5280] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  204.645885][ T5280] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  204.667597][ T5280] usb 2-1: USB disconnect, device number 20
[  205.014988][ T7185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.164937][ T7185] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.409231][ T5276] hid (null): nested delimiters
[  205.496852][ T5276] hid (null): nested delimiters
[  205.528362][ T5276] hid (null): nested delimiters
[  205.551913][ T5276] hid (null): report_id 2838798905 is invalid
[  205.584293][ T5276] hid (null): unknown global tag 0xc
[  205.611509][ T5276] hid (null): unknown global tag 0xa5
[  205.629626][ T5276] hid (null): unknown global tag 0xd
[  205.656280][ T5276] hid (null): unknown global tag 0xc
[  205.722344][   T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  205.723687][ T5276] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1
[  205.730124][   T46] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  205.806179][ T5276] hid-generic 0003:0158:0100.0003: unexpected long global item
[  205.858594][ T5276] hid-generic 0003:0158:0100.0003: probe with driver hid-generic failed with error -22
[  205.963915][   T25] usb 1-1: Using ep0 maxpacket: 8
[  205.981215][   T46] usb 2-1: Using ep0 maxpacket: 8
[  206.013735][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  206.052925][   T46] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  206.090827][   T25] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  206.099950][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.118805][   T46] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  206.153994][ T5235] Bluetooth: hci8: Opcode 0x0c03 failed: -110
[  206.161024][   T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.329481][   T25] usb 1-1: config 0 descriptor??
[  206.816904][   T25] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1
[  206.957291][ T5276] usb 5-1: USB disconnect, device number 17
[  207.362254][ T7224] x_tables: unsorted entry at hook 2
[  208.208096][ T7241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.243828][ T7241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.378510][ T5312] usb 2-1: USB disconnect, device number 21
[  208.840266][ T7255] netlink: 'syz.1.549': attribute type 12 has an invalid length.
[  208.881452][ T7255] netlink: 'syz.1.549': attribute type 11 has an invalid length.
[  208.923985][ T7255] netlink: 190580 bytes leftover after parsing attributes in process `syz.1.549'.
[  209.391706][ T5307] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  209.605540][ T2980] Bluetooth: hci7: Frame reassembly failed (-84)
[  209.630418][   T25] usb 1-1: USB disconnect, device number 14
[  209.677635][   T25] iowarrior 1-1:0.0: I/O-Warror #1 now disconnected
[  209.721065][ T5307] usb 2-1: Using ep0 maxpacket: 16
[  209.741472][ T5307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  209.825831][ T5307] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  209.915111][ T5307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.943254][ T5307] usb 2-1: config 0 descriptor??
[  209.954455][ T7275] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  209.961555][ T7275] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  210.000514][ T7275] vhci_hcd vhci_hcd.0: Device attached
[  210.300961][ T5276] usb 17-1: new high-speed USB device number 2 using vhci_hcd
[  210.399083][ T7282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.557'.
[  210.443100][ T7282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.475107][ T7260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.486031][ T7282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.508630][ T7282] vivid-000: =================  START STATUS  =================
[  210.520474][ T7282] vivid-000: Generate PTS: true
[  210.528619][ T7282] vivid-000: Generate SCR: true
[  210.535723][ T7282] tpg source WxH: 320x180 (R'G'B)
[  210.541415][ T7282] tpg field: 1
[  210.545076][ T7282] tpg crop: 320x180@0x0
[  210.551341][ T7282] tpg compose: 320x180@0x0
[  210.557973][ T7282] tpg colorspace: 8
[  210.578345][ T7282] tpg transfer function: 0/0
[  210.586950][ T7282] tpg quantization: 0/0
[  210.598722][ T7282] tpg RGB range: 0/2
[  210.604290][ T7282] vivid-000: ==================  END STATUS  ==================
[  210.620385][ T7260] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.656150][   T25] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  210.679995][ T5307] hid (null): nested delimiters
[  210.721011][ T5307] hid (null): nested delimiters
[  210.735554][ T5307] hid (null): nested delimiters
[  210.746517][ T5307] hid (null): report_id 2838798905 is invalid
[  210.767643][ T5307] hid (null): unknown global tag 0xc
[  210.793112][ T5307] hid (null): unknown global tag 0xa5
[  210.798598][ T5307] hid (null): unknown global tag 0xd
[  210.827278][ T5307] hid (null): unknown global tag 0xc
[  210.854533][ T5307] hid-generic 0003:0158:0100.0004: unknown main item tag 0x1
[  210.860921][   T25] usb 1-1: Using ep0 maxpacket: 8
[  210.867675][ T5307] hid-generic 0003:0158:0100.0004: unexpected long global item
[  210.899576][   T25] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  210.916959][ T5307] hid-generic 0003:0158:0100.0004: probe with driver hid-generic failed with error -22
[  210.921486][   T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  210.963310][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.315007][ T5312] usb 2-1: USB disconnect, device number 22
[  211.322548][ T7276] vhci_hcd: connection reset by peer
[  211.372265][ T2989] vhci_hcd: stop threads
[  211.378159][ T2989] vhci_hcd: release socket
[  211.433631][ T2989] vhci_hcd: disconnect device
[  211.641001][ T5245] Bluetooth: hci7: command 0x1003 tx timeout
[  211.652242][ T5235] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  213.084348][ T7325] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  213.090936][ T7325] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  213.104685][ T7325] vhci_hcd vhci_hcd.0: Device attached
[  213.248328][ T7333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.266130][ T7333] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.369541][ T5312] usb 1-1: USB disconnect, device number 15
[  213.411473][ T5308] usb 13-1: new high-speed USB device number 2 using vhci_hcd
[  213.660566][ T7341] netlink: 'syz.0.574': attribute type 12 has an invalid length.
[  213.674178][ T7341] netlink: 'syz.0.574': attribute type 11 has an invalid length.
[  213.682437][ T7341] netlink: 190580 bytes leftover after parsing attributes in process `syz.0.574'.
[  213.751307][ T2989] Bluetooth: hci7: Frame reassembly failed (-84)
[  214.051316][ T5312] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  214.243653][ T5312] usb 1-1: Using ep0 maxpacket: 16
[  214.279122][ T5312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  214.330878][ T5312] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  214.340083][ T5312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.355803][ T5312] usb 1-1: config 0 descriptor??
[  214.488411][ T7326] vhci_hcd: connection reset by peer
[  214.512876][ T2989] vhci_hcd: stop threads
[  214.538881][ T2989] vhci_hcd: release socket
[  214.565076][ T2989] vhci_hcd: disconnect device
[  214.906829][ T7342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.032776][ T7342] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.106898][ T5312] hid (null): nested delimiters
[  215.127244][ T5312] hid (null): nested delimiters
[  215.138192][ T5312] hid (null): nested delimiters
[  215.147476][ T5312] hid (null): report_id 2838798905 is invalid
[  215.171199][ T5312] hid (null): unknown global tag 0xc
[  215.188776][ T5312] hid (null): unknown global tag 0xa5
[  215.220198][ T5312] hid (null): unknown global tag 0xd
[  215.256240][ T5312] hid (null): unknown global tag 0xc
[  215.280257][ T5312] hid-generic 0003:0158:0100.0005: unknown main item tag 0x1
[  215.298140][ T5312] hid-generic 0003:0158:0100.0005: unexpected long global item
[  215.316614][ T5312] hid-generic 0003:0158:0100.0005: probe with driver hid-generic failed with error -22
[  215.330475][ T7366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.359439][ T7366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.501084][ T5276] vhci_hcd: vhci_device speed not set
[  215.800832][ T5235] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  215.801100][ T5245] Bluetooth: hci7: command 0x1003 tx timeout
[  215.974106][ T5280] usb 1-1: USB disconnect, device number 16
[  216.100941][  T941] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  216.331014][  T941] usb 3-1: Using ep0 maxpacket: 8
[  216.362090][  T941] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  216.393908][  T941] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  216.439913][  T941] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  216.470868][  T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.514354][  T941] usbtmc 3-1:16.0: bulk endpoints not found
[  216.651982][ T7383] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  216.658563][ T7383] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  216.700302][ T7383] vhci_hcd vhci_hcd.0: Device attached
[  216.880981][ T5280] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  216.991005][ T5312] usb 17-1: new high-speed USB device number 3 using vhci_hcd
[  217.108140][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.154057][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.185205][ T5280] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  217.194632][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.214015][ T5280] usb 2-1: config 0 descriptor??
[  217.336551][ T7384] vhci_hcd: connection reset by peer
[  217.358311][   T62] vhci_hcd: stop threads
[  217.378745][   T62] vhci_hcd: release socket
[  217.403641][   T62] vhci_hcd: disconnect device
[  217.752022][ T5280] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[  217.767404][ T5280] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[  217.793683][ T5280] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[  217.820473][ T5280] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[  217.850848][ T5280] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[  217.961149][ T5280] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0
[  218.005228][ T5280] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints?
[  218.521055][ T5308] vhci_hcd: vhci_device speed not set
[  218.824043][  T941] usb 3-1: USB disconnect, device number 10
[  219.013369][    C1] hid-thrustmaster 0003:044F:B65D.0006: URB to get model id failed with error -108
[  219.050908][ T7414] netlink: 'syz.3.597': attribute type 12 has an invalid length.
[  219.078739][ T7414] netlink: 'syz.3.597': attribute type 11 has an invalid length.
[  219.130271][ T7414] netlink: 150484 bytes leftover after parsing attributes in process `syz.3.597'.
[  219.193419][    T8] usb 2-1: reset high-speed USB device number 23 using dummy_hcd
[  219.442820][    T8] usb 2-1: device descriptor read/64, error -32
[  219.458277][ T7418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.490867][  T941] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  219.535018][ T7418] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.771126][  T941] usb 3-1: Using ep0 maxpacket: 8
[  219.791975][  T941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  219.820949][  T941] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  219.846089][  T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.858636][  T941] usb 3-1: config 0 descriptor??
[  220.059304][ T7438] netlink: 36 bytes leftover after parsing attributes in process `syz.4.603'.
[  220.094738][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'.
[  220.120134][ T7438] tc_dump_action: action bad kind
[  220.153326][ T7435] sctp: [Deprecated]: syz.4.603 (pid 7435) Use of int in max_burst socket option deprecated.
[  220.153326][ T7435] Use struct sctp_assoc_value instead
[  220.187867][  T941] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1
[  220.301485][ T7435] x_tables: duplicate underflow at hook 3
[  220.416561][ T5276] usb 2-1: USB disconnect, device number 23
[  220.496183][ T7447] netlink: 'syz.1.606': attribute type 12 has an invalid length.
[  220.531489][ T7447] netlink: 'syz.1.606': attribute type 11 has an invalid length.
[  220.565416][ T7447] netlink: 190580 bytes leftover after parsing attributes in process `syz.1.606'.
[  220.880885][ T5280] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  221.013730][ T5276] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  221.101696][ T5280] usb 1-1: Using ep0 maxpacket: 8
[  221.109115][ T5280] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  221.134532][ T5280] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  221.169357][ T5280] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  221.196536][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.211007][ T5276] usb 2-1: Using ep0 maxpacket: 16
[  221.220201][ T5280] usbtmc 1-1:16.0: bulk endpoints not found
[  221.228394][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  221.270539][ T5276] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  221.299964][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.322306][ T5276] usb 2-1: config 0 descriptor??
[  221.401843][    T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  221.591191][    T8] usb 5-1: Using ep0 maxpacket: 8
[  221.603487][    T8] usb 5-1: config 135 has an invalid interface number: 230 but max is 0
[  221.638390][    T8] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  221.688091][    T8] usb 5-1: config 135 has no interface number 0
[  221.696953][    T8] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  221.730346][    T8] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  221.748694][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.759817][    T8] usb 5-1: Product: syz
[  221.768487][ T7447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.777990][    T8] usb 5-1: Manufacturer: syz
[  221.791629][ T7447] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.805194][    T8] usb 5-1: SerialNumber: syz
[  221.839640][    T8] usb 5-1: Found UVC 0.00 device syz (18ec:3288)
[  221.849475][ T5276] hid (null): nested delimiters
[  221.873228][ T5276] hid (null): nested delimiters
[  221.878168][ T5276] hid (null): nested delimiters
[  221.883387][    T8] usb 5-1: No valid video chain found.
[  221.892397][ T5276] hid (null): report_id 2838798905 is invalid
[  221.898568][ T5276] hid (null): unknown global tag 0xc
[  221.904026][ T5276] hid (null): unknown global tag 0xa5
[  221.909491][ T5276] hid (null): unknown global tag 0xd
[  221.920989][ T5276] hid (null): unknown global tag 0xc
[  221.942779][ T5276] hid-generic 0003:0158:0100.0007: unknown main item tag 0x1
[  221.950261][ T5276] hid-generic 0003:0158:0100.0007: unexpected long global item
[  221.976992][ T5276] hid-generic 0003:0158:0100.0007: probe with driver hid-generic failed with error -22
[  222.037838][ T5276] usb 5-1: USB disconnect, device number 18
[  222.092604][ T5308] usb 2-1: USB disconnect, device number 24
[  222.121827][ T5312] vhci_hcd: vhci_device speed not set
[  223.554139][   T46] usb 3-1: USB disconnect, device number 11
[  223.607553][    T8] usb 1-1: USB disconnect, device number 17
[  223.616121][ T2980] Bluetooth: hci7: Frame reassembly failed (-84)
[  223.629478][   T46] iowarrior 3-1:0.0: I/O-Warror #1 now disconnected
[  223.940916][ T7490] usb usb8: usbfs: process 7490 (syz.4.618) did not claim interface 0 before use
[  224.029630][   T29] kauditd_printk_skb: 60 callbacks suppressed
[  224.029652][   T29] audit: type=1326 audit(1725929913.452:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7488 comm="syz.4.618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f002197def9 code=0x0
[  224.059972][ T7495] x_tables: unsorted entry at hook 2
[  224.980765][   T46] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  225.200861][   T46] usb 5-1: Using ep0 maxpacket: 8
[  225.228130][   T46] usb 5-1: config 135 has an invalid interface number: 230 but max is 0
[  225.256550][   T46] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  225.314246][   T46] usb 5-1: config 135 has no interface number 0
[  225.343056][   T46] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  225.364887][   T46] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  225.380764][   T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.405393][   T46] usb 5-1: Product: syz
[  225.423248][   T46] usb 5-1: Manufacturer: syz
[  225.440459][   T46] usb 5-1: SerialNumber: syz
[  225.473671][   T46] usb 5-1: Found UVC 0.00 device syz (18ec:3288)
[  225.498343][   T46] usb 5-1: No valid video chain found.
[  225.641652][ T5245] Bluetooth: hci7: command 0x1003 tx timeout
[  225.650072][ T5235] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  225.678451][   T46] usb 5-1: USB disconnect, device number 19
[  225.921834][ T7529] netlink: 'syz.2.632': attribute type 11 has an invalid length.
[  225.940000][ T7529] netlink: 134820 bytes leftover after parsing attributes in process `syz.2.632'.
[  226.080949][ T5276] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  226.183139][ T7533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.266241][ T7533] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.281118][ T5276] usb 2-1: Using ep0 maxpacket: 8
[  226.315821][ T5276] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  226.353699][ T5276] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  226.397315][ T5276] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  226.426981][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.472672][ T5276] usbtmc 2-1:16.0: bulk endpoints not found
[  226.793981][ T7549] x_tables: unsorted entry at hook 2
[  226.870891][   T46] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  227.066043][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.086677][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.111897][   T46] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  227.131303][   T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.148123][   T46] usb 3-1: config 0 descriptor??
[  227.657799][   T46] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0
[  227.676768][   T46] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0
[  227.697344][   T46] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0
[  227.724912][   T46] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0
[  227.747583][   T46] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0
[  227.783055][   T46] hid-thrustmaster 0003:044F:B65D.0008: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0
[  227.819068][   T46] hid-thrustmaster 0003:044F:B65D.0008: Wrong number of endpoints?
[  228.080035][   T29] audit: type=1326 audit(1725929917.502:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7560 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002197def9 code=0x7ffc0000
[  228.112788][   T29] audit: type=1326 audit(1725929917.502:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7560 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002197def9 code=0x7ffc0000
[  228.144822][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'.
[  228.185152][   T29] audit: type=1326 audit(1725929917.512:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7560 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f002197def9 code=0x7ffc0000
[  228.393117][   T29] audit: type=1326 audit(1725929917.822:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7560 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002197def9 code=0x7ffc0000
[  228.419449][   T29] audit: type=1326 audit(1725929917.822:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7560 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002197def9 code=0x7ffc0000
[  228.778230][ T5276] usb 2-1: USB disconnect, device number 25
[  229.000610][    C1] hid-thrustmaster 0003:044F:B65D.0008: URB to get model id failed with error -108
[  229.171205][   T46] usb 3-1: reset high-speed USB device number 12 using dummy_hcd
[  229.518842][   T46] usb 3-1: device descriptor read/64, error -32
[  229.529960][   T62] Bluetooth: hci7: Frame reassembly failed (-84)
[  229.683792][ T7582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.715269][ T7582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.852900][ T7586] capability: warning: `syz.3.647' uses 32-bit capabilities (legacy support in use)
[  230.493485][ T5312] usb 3-1: USB disconnect, device number 12
[  230.903662][ T7602] netlink: 'syz.4.652': attribute type 1 has an invalid length.
[  231.250961][   T46] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  231.440990][   T46] usb 2-1: Using ep0 maxpacket: 8
[  231.480214][   T46] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  231.515047][   T46] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  231.528222][   T46] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  231.539738][   T46] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  231.554276][   T46] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  231.563798][ T5245] Bluetooth: hci7: command 0x1003 tx timeout
[  231.570327][ T5235] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  231.602801][   T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.617722][   T46] usbtmc 2-1:16.0: bulk endpoints not found
[  232.351091][   T46] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  232.550947][   T46] usb 5-1: Using ep0 maxpacket: 8
[  232.559582][   T46] usb 5-1: config 8 has an invalid interface number: 188 but max is 0
[  232.569131][   T46] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  232.581406][   T46] usb 5-1: config 8 has no interface number 0
[  232.588635][   T46] usb 5-1: config 8 interface 188 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  232.602362][   T46] usb 5-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  232.628811][   T46] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[  232.648153][   T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.669207][   T46] usb 5-1: Product: syz
[  232.674038][   T46] usb 5-1: Manufacturer: syz
[  232.679065][   T46] usb 5-1: SerialNumber: syz
[  232.731499][ T5312] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  232.963288][ T5312] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  233.012661][ T5312] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  233.039292][ T7639] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.658'.
[  233.050564][ T7639] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  233.076899][ T5312] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[  233.100353][ T5312] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  233.119684][ T5312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.161470][ T7627] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22
[  233.208179][ T5312] hub 1-1:1.0: bad descriptor, ignoring hub
[  233.234018][ T5312] hub 1-1:1.0: probe with driver hub failed with error -5
[  233.255210][ T5312] cdc_wdm 1-1:1.0: skipping garbage
[  233.273546][ T5312] cdc_wdm 1-1:1.0: skipping garbage
[  233.306493][ T5312] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device
[  233.332994][ T5312] cdc_wdm 1-1:1.0: Unknown control protocol
[  233.581269][   T46] vmk80xx 5-1:8.188: driver 'vmk80xx' failed to auto-configure device.
[  233.610603][   T46] usb 5-1: USB disconnect, device number 20
[  233.706155][ T7648] netlink: 'syz.2.665': attribute type 1 has an invalid length.
[  233.792302][ T7627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.817311][ T7627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.913285][ T7651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.959261][ T7651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.991773][ T5276] usb 2-1: USB disconnect, device number 26
[  234.233243][ T7627] netlink: 'syz.0.661': attribute type 30 has an invalid length.
[  234.629003][   T62] Bluetooth: hci7: Frame reassembly failed (-84)
[  234.836509][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.669'.
[  234.886872][   T29] audit: type=1326 audit(1725929924.312:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7663 comm="syz.2.669" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x0
[  235.173721][   T46] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  235.362857][   T46] usb 5-1: Using ep0 maxpacket: 8
[  235.404157][   T46] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89
[  235.456405][   T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  235.529626][   T46] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  235.570835][   T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.604868][   T46] usb 5-1: Product: syz
[  235.619830][   T46] usb 5-1: Manufacturer: syz
[  235.633087][   T46] usb 5-1: SerialNumber: syz
[  235.676743][   T46] usb 5-1: config 0 descriptor??
[  235.731709][   T46] streamzap 5-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0204
[  235.912977][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'.
[  236.033953][ T7665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.061381][ T5276] usb 1-1: USB disconnect, device number 18
[  236.083172][ T7665] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.680862][ T5245] Bluetooth: hci7: command 0x1003 tx timeout
[  236.681045][ T5235] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  236.832761][ T7687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.876321][ T7687] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.296877][   T46] usb 5-1: USB disconnect, device number 21
[  237.621016][ T5312] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  237.681442][ T7701] netlink: 'syz.1.679': attribute type 1 has an invalid length.
[  237.890858][ T5312] usb 3-1: Using ep0 maxpacket: 16
[  237.909022][ T7710] x_tables: unsorted entry at hook 2
[  237.918797][ T5312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.009358][ T5312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.029359][ T5312] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  238.075665][ T5312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.119040][ T5312] usb 3-1: config 0 descriptor??
[  238.193504][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'.
[  238.451855][ T7724] netlink: 'syz.4.685': attribute type 12 has an invalid length.
[  238.494298][ T7724] netlink: 'syz.4.685': attribute type 11 has an invalid length.
[  238.502898][ T7724] netlink: 190580 bytes leftover after parsing attributes in process `syz.4.685'.
[  238.642978][ T5312] elecom 0003:056E:00FC.0009: unexpected long global item
[  239.010124][ T5312] elecom 0003:056E:00FC.0009: probe with driver elecom failed with error -22
[  239.562742][   T12] Bluetooth: hci7: Frame reassembly failed (-84)
[  240.318150][ T5312] usb 3-1: USB disconnect, device number 13
[  240.330841][ T5278] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  240.530951][   T46] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  240.538659][ T5278] usb 1-1: Using ep0 maxpacket: 8
[  240.558901][ T5278] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89
[  240.590946][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  240.622878][ T5278] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  240.632656][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.641740][ T5278] usb 1-1: Product: syz
[  240.647285][ T5278] usb 1-1: Manufacturer: syz
[  240.666553][ T5278] usb 1-1: SerialNumber: syz
[  240.688990][ T7757] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[  240.708987][ T5278] usb 1-1: config 0 descriptor??
[  240.734884][ T5278] streamzap 1-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0204
[  240.751118][   T46] usb 2-1: Using ep0 maxpacket: 32
[  240.759090][   T46] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  240.778566][   T46] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  240.820063][   T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  240.834482][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.844991][   T46] usb 2-1: Product: syz
[  240.849269][   T46] usb 2-1: Manufacturer: syz
[  240.854425][   T46] usb 2-1: SerialNumber: syz
[  241.010401][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.040017][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.090540][   T46] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  241.124962][ T7760] netlink: 'syz.4.696': attribute type 1 has an invalid length.
[  241.571299][ T5235] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  242.635297][ T5276] usb 1-1: USB disconnect, device number 19
[  242.733539][ T7786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.702'.
[  242.880346][ T7786] vlan2: entered promiscuous mode
[  242.895357][ T7786] bridge0: entered promiscuous mode
[  242.969199][    T8] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  243.170959][    T8] usb 5-1: Using ep0 maxpacket: 8
[  243.220460][    T8] usb 5-1: config 8 has an invalid interface number: 188 but max is 0
[  243.293420][    T8] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  243.323740][    T8] usb 5-1: config 8 has no interface number 0
[  243.359520][    T8] usb 5-1: config 8 interface 188 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  243.388787][  T941] usb 2-1: USB disconnect, device number 27
[  243.423856][  T941] usblp1: removed
[  243.438426][    T8] usb 5-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  243.508497][    T8] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[  243.538096][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.550745][    T8] usb 5-1: Product: syz
[  243.555226][    T8] usb 5-1: Manufacturer: syz
[  243.560117][    T8] usb 5-1: SerialNumber: syz
[  243.865428][ T7811] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.703'.
[  243.877398][ T7811] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  243.918181][ T7812] netlink: 'syz.1.709': attribute type 1 has an invalid length.
[  244.099235][    T8] vmk80xx 5-1:8.188: driver 'vmk80xx' failed to auto-configure device.
[  244.154512][    T8] usb 5-1: USB disconnect, device number 22
[  244.941410][   T35] Bluetooth: hci7: Frame reassembly failed (-84)
[  245.413466][ T7832] x_tables: unsorted entry at hook 2
[  246.597305][ T7846] xt_NFQUEUE: number of total queues is 0
[  246.646458][ T7852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.670604][ T7852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.001114][ T5245] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  247.672918][ T7872] x_tables: unsorted entry at hook 2
[  247.750960][ T5278] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  247.952331][ T5278] usb 1-1: Using ep0 maxpacket: 8
[  247.970078][ T5278] usb 1-1: config 8 has an invalid interface number: 188 but max is 0
[  247.992161][ T5278] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  248.005710][ T5278] usb 1-1: config 8 has no interface number 0
[  248.014798][ T5278] usb 1-1: config 8 interface 188 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  248.027594][ T5278] usb 1-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  248.046894][ T5278] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[  248.058554][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.067475][ T5278] usb 1-1: Product: syz
[  248.075304][ T5278] usb 1-1: Manufacturer: syz
[  248.080258][ T5278] usb 1-1: SerialNumber: syz
[  248.471317][ T7887] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.724'.
[  248.481277][ T7887] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  249.252925][ T7899] netlink: 'syz.2.733': attribute type 1 has an invalid length.
[  249.318684][ T5278] vmk80xx 1-1:8.188: driver 'vmk80xx' failed to auto-configure device.
[  249.407387][ T5278] usb 1-1: USB disconnect, device number 20
[  249.670104][ T1178] Bluetooth: hci7: Frame reassembly failed (-84)
[  250.094019][ T7913] netlink: 'syz.3.737': attribute type 12 has an invalid length.
[  250.161140][ T7913] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.737'.
[  250.695822][ T7923] netlink: 'syz.3.742': attribute type 3 has an invalid length.
[  250.796115][ T7928] netlink: 20 bytes leftover after parsing attributes in process `syz.4.744'.
[  250.824817][   T29] audit: type=1326 audit(1725929940.252:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7926 comm="syz.4.744" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f002197def9 code=0x0
[  250.845630][    C1] vkms_vblank_simulate: vblank timer overrun
[  251.721299][ T5235] Bluetooth: hci7: command 0x1003 tx timeout
[  251.721986][ T5245] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  252.180917][ T7952] netlink: 'syz.0.749': attribute type 1 has an invalid length.
[  252.260811][  T941] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  252.338364][ T7960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.390563][ T7960] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.406064][ T7961] netlink: 'syz.2.753': attribute type 12 has an invalid length.
[  252.426459][ T7961] netlink: 'syz.2.753': attribute type 11 has an invalid length.
[  252.470607][ T7961] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.753'.
[  252.485480][  T941] usb 5-1: Using ep0 maxpacket: 32
[  252.498966][  T941] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  252.510069][  T941] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  252.525784][  T941] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  252.545076][  T941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.554061][  T941] usb 5-1: Product: syz
[  252.558373][  T941] usb 5-1: Manufacturer: syz
[  252.566263][  T941] usb 5-1: SerialNumber: syz
[  252.761407][   T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  252.789076][  T941] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  252.961044][   T25] usb 3-1: Using ep0 maxpacket: 16
[  252.998446][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  253.060166][   T25] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  253.086657][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.281963][   T25] usb 3-1: config 0 descriptor??
[  253.843866][ T7964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.995423][ T7964] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.121927][   T30] INFO: task syz.2.33:5430 blocked for more than 143 seconds.
[  254.125524][   T25] hid (null): nested delimiters
[  254.129454][   T30]       Not tainted 6.11.0-rc7-syzkaller #0
[  254.157689][   T25] hid (null): nested delimiters
[  254.186970][   T25] hid (null): nested delimiters
[  254.200696][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  254.215397][   T25] hid (null): report_id 2838798905 is invalid
[  254.240531][   T25] hid (null): unknown global tag 0xc
[  254.259512][   T25] hid (null): unknown global tag 0xa5
[  254.464158][   T25] hid (null): unknown global tag 0xd
[  254.482815][ T2980] Bluetooth: hci7: Frame reassembly failed (-84)
[  254.489993][   T30] task:syz.2.33        state:D stack:24672 pid:5430  tgid:5430  ppid:5226   flags:0x00000004
[  254.588450][   T25] hid (null): unknown global tag 0xc
[  254.736635][   T30] Call Trace:
[  254.899198][   T30]  <TASK>
[  254.973238][   T30]  __schedule+0x17ae/0x4a10
[  254.974492][   T25] hid-generic 0003:0158:0100.000A: unknown main item tag 0x1
[  254.989339][   T30]  ? __pfx___schedule+0x10/0x10
[  255.018187][   T25] hid-generic 0003:0158:0100.000A: unexpected long global item
[  255.039081][   T25] hid-generic 0003:0158:0100.000A: probe with driver hid-generic failed with error -22
[  255.059357][   T30]  ? __pfx_lock_release+0x10/0x10
[  255.079295][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  255.127646][   T30]  ? schedule+0x90/0x320
[  255.149246][   T30]  schedule+0x14b/0x320
[  255.173279][   T30]  schedule_preempt_disabled+0x13/0x30
[  255.189450][   T30]  __mutex_lock+0x6a4/0xd70
[  255.205077][  T941] usb 5-1: USB disconnect, device number 23
[  255.218120][   T30]  ? __mutex_lock+0x527/0xd70
[  255.230319][   T30]  ? hugetlb_fault+0x56f/0x3770
[  255.237142][  T941] usblp1: removed
[  255.248621][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  255.258833][   T30]  hugetlb_fault+0x56f/0x3770
[  255.264527][   T30]  ? __lock_acquire+0x137a/0x2040
[  255.270228][   T30]  ? __pfx_hugetlb_fault+0x10/0x10
[  255.279338][   T30]  ? reacquire_held_locks+0x3eb/0x690
[  255.284918][   T30]  ? lock_vma_under_rcu+0x2f9/0x6e0
[  255.290357][   T30]  ? __pfx_reacquire_held_locks+0x10/0x10
[  255.296527][   T30]  handle_mm_fault+0x183d/0x1ad0
[  255.310758][   T30]  ? lock_vma_under_rcu+0x18a/0x6e0
[  255.316093][   T30]  ? __pfx_lock_release+0x10/0x10
[  255.326526][   T30]  ? lock_vma_under_rcu+0x2f9/0x6e0
[  255.336415][   T30]  ? __pfx_handle_mm_fault+0x10/0x10
[  255.350723][   T30]  ? lock_vma_under_rcu+0x592/0x6e0
[  255.360718][   T30]  ? lock_vma_under_rcu+0x18a/0x6e0
[  255.366032][   T30]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  255.380702][   T30]  ? exc_page_fault+0x113/0x8c0
[  255.391144][   T30]  exc_page_fault+0x459/0x8c0
[  255.395996][   T30]  asm_exc_page_fault+0x26/0x30
[  255.406160][   T30] RIP: 0033:0x7f9f7b34597c
[  255.420707][   T30] RSP: 002b:00007ffdbd0c77f8 EFLAGS: 00010246
[  255.426850][   T30] RAX: 0000000020000d00 RBX: 0000000000000004 RCX: 8000000000000010
[  255.444546][   T30] RDX: 0000000000000010 RSI: 00007f9f7ae005d5 RDI: 0000000020000d00
[  255.460689][   T30] RBP: 00007f9f7b537a80 R08: 00007f9f7b200000 R09: 0000000000000001
[  255.468742][   T30] R10: 0000000000000001 R11: 0000000000000009 R12: 00000000000162bb
[  255.491935][   T30] R13: 00007ffdbd0c7900 R14: 0000000000000032 R15: fffffffffffffffe
[  255.500213][   T30]  </TASK>
[  255.504440][   T30] INFO: task syz.2.33:5431 blocked for more than 144 seconds.
[  255.518231][  T941] usb 3-1: USB disconnect, device number 14
[  255.521047][   T30]       Not tainted 6.11.0-rc7-syzkaller #0
[  255.533671][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  255.548763][   T30] task:syz.2.33        state:D stack:25968 pid:5431  tgid:5430  ppid:5226   flags:0x00004006
[  255.569664][   T30] Call Trace:
[  255.574373][   T30]  <TASK>
[  255.577382][   T30]  __schedule+0x17ae/0x4a10
[  255.582411][   T30]  ? __pfx___schedule+0x10/0x10
[  255.587540][   T30]  ? __pfx_lock_release+0x10/0x10
[  255.592705][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  255.598903][   T30]  ? schedule+0x90/0x320
[  255.603262][   T30]  schedule+0x14b/0x320
[  255.607471][   T30]  io_schedule+0x8d/0x110
[  255.612092][   T30]  folio_wait_bit_common+0x882/0x12b0
[  255.617537][   T30]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  255.624086][   T30]  ? __pfx_wake_page_function+0x10/0x10
[  255.629684][   T30]  ? _raw_spin_unlock+0x28/0x50
[  255.634801][   T30]  ? __vma_reservation_common+0x498/0x7d0
[  255.640611][   T30]  __filemap_get_folio+0xb7/0xc10
[  255.645980][   T30]  hugetlb_fault+0x1b72/0x3770
[  255.653821][   T30]  ? __pfx_hugetlb_fault+0x10/0x10
[  255.659127][   T30]  ? __pfx_lock_release+0x10/0x10
[  255.664439][   T30]  handle_mm_fault+0x183d/0x1ad0
[  255.669467][   T30]  ? mt_find+0x226/0x850
[  255.675094][   T30]  ? __pfx_mt_find+0x10/0x10
[  255.679748][   T30]  ? __pfx_handle_mm_fault+0x10/0x10
[  255.686548][   T30]  ? find_vma+0xf9/0x170
[  255.691503][   T30]  ? __pfx_find_vma+0x10/0x10
[  255.696257][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  255.702927][   T30]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  255.708263][   T30]  exc_page_fault+0x2b9/0x8c0
[  255.713132][   T30]  asm_exc_page_fault+0x26/0x30
[  255.718046][   T30] RIP: 0010:rep_movs_alternative+0x4a/0x70
[  255.725351][   T30] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1
[  255.745969][   T30] RSP: 0018:ffffc90004acfad0 EFLAGS: 00050246
[  255.753520][   T30] RAX: ffffffff84aa0e01 RBX: 00000000200118c0 RCX: 0000000000000040
[  255.763048][   T30] RDX: 0000000000000000 RSI: ffffc90004acfb60 RDI: 0000000020011880
[  255.771171][   T30] RBP: ffffc90004acfc10 R08: ffffc90004acfb9f R09: 1ffff92000959f73
[  255.779217][   T30] R10: dffffc0000000000 R11: fffff52000959f74 R12: 0000000000000040
[  255.788524][   T30] R13: 0000000000011240 R14: 0000000020011880 R15: ffffc90004acfb60
[  255.797492][   T30]  ? __pfx__copy_to_user+0x1/0x10
[  255.803264][   T30]  _copy_to_user+0x86/0xb0
[  255.807786][   T30]  rng_dev_read+0x3be/0x6d0
[  255.813055][   T30]  ? __pfx_rng_dev_read+0x10/0x10
[  255.818179][   T30]  ? security_file_permission+0x7f/0xa0
[  255.824324][   T30]  ? rw_verify_area+0x52a/0x6b0
[  255.829230][   T30]  vfs_readv+0x6c2/0xa90
[  255.833714][   T30]  ? __pfx_rng_dev_read+0x10/0x10
[  255.838815][   T30]  ? __pfx_vfs_readv+0x10/0x10
[  255.843841][   T30]  ? __fget_files+0x29/0x470
[  255.848499][   T30]  __x64_sys_preadv+0x1c7/0x2d0
[  255.853538][   T30]  ? __pfx___x64_sys_preadv+0x10/0x10
[  255.861387][   T30]  ? do_syscall_64+0x100/0x230
[  255.866227][   T30]  ? do_syscall_64+0xb6/0x230
[  255.872270][   T30]  do_syscall_64+0xf3/0x230
[  255.876845][   T30]  ? clear_bhb_loop+0x35/0x90
[  255.882567][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.888562][   T30] RIP: 0033:0x7f9f7b37def9
[  255.894177][   T30] RSP: 002b:00007f9f7c177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  255.903722][   T30] RAX: ffffffffffffffda RBX: 00007f9f7b535f80 RCX: 00007f9f7b37def9
[  255.911925][   T30] RDX: 0000000000000002 RSI: 0000000020000580 RDI: 0000000000000005
[  255.919937][   T30] RBP: 00007f9f7b3f09f6 R08: 0000000000000000 R09: 0000000000000000
[  255.928562][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  255.936676][   T30] R13: 0000000000000000 R14: 00007f9f7b535f80 R15: 00007ffdbd0c7698
[  255.945086][   T30]  </TASK>
[  255.948195][   T30] INFO: task syz.2.33:5434 blocked for more than 145 seconds.
[  255.959924][   T30]       Not tainted 6.11.0-rc7-syzkaller #0
[  255.982047][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  256.001874][   T30] task:syz.2.33        state:D stack:22352 pid:5434  tgid:5430  ppid:5226   flags:0x00004004
[  256.021984][   T30] Call Trace:
[  256.025694][   T30]  <TASK>
[  256.028648][   T30]  __schedule+0x17ae/0x4a10
[  256.039159][   T30]  ? __pfx___schedule+0x10/0x10
[  256.058716][   T30]  ? __pfx_lock_release+0x10/0x10
[  256.059546][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  256.065180][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  256.071783][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  256.076535][   T30]  ? schedule+0x90/0x320
[  256.086512][   T30]  schedule+0x14b/0x320
[  256.092142][   T30]  schedule_preempt_disabled+0x13/0x30
[  256.097849][   T30]  __mutex_lock+0x6a4/0xd70
[  256.102635][   T30]  ? __mutex_lock+0x527/0xd70
[  256.107371][   T30]  ? hugetlb_wp+0x104d/0x3a90
[  256.113173][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  256.118234][   T30]  ? __pfx_up_write+0x10/0x10
[  256.124507][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[  256.129774][   T30]  ? vma_interval_tree_iter_next+0x193/0x340
[  256.135938][   T30]  hugetlb_wp+0x104d/0x3a90
[  256.140488][   T30]  ? mark_lock+0x9a/0x350
[  256.145148][   T30]  ? __pfx_hugetlb_wp+0x10/0x10
[  256.150047][   T30]  ? __pfx___might_resched+0x10/0x10
[  256.155526][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  256.160609][   T30]  ? do_raw_spin_lock+0x14f/0x370
[  256.166889][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  256.172461][   T30]  ? __filemap_get_folio+0x769/0xc10
[  256.177801][   T30]  hugetlb_fault+0x27b2/0x3770
[  256.182884][   T30]  ? __pfx_hugetlb_fault+0x10/0x10
[  256.188076][   T30]  ? __pfx_lock_release+0x10/0x10
[  256.193330][   T30]  handle_mm_fault+0x183d/0x1ad0
[  256.198422][   T30]  ? mt_find+0x226/0x850
[  256.205388][   T30]  ? __pfx_mt_find+0x10/0x10
[  256.210026][   T30]  ? __pfx_handle_mm_fault+0x10/0x10
[  256.215428][   T30]  ? find_vma+0xf9/0x170
[  256.219708][   T30]  ? __pfx_find_vma+0x10/0x10
[  256.225785][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  256.233323][   T30]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  256.238677][   T30]  exc_page_fault+0x2b9/0x8c0
[  256.243531][   T30]  asm_exc_page_fault+0x26/0x30
[  256.248591][   T30] RIP: 0010:__put_user_8+0x11/0x20
[  256.253832][   T30] Code: 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90
[  256.274419][   T30] RSP: 0018:ffffc90004b57778 EFLAGS: 00050202
[  256.280537][   T30] RAX: 0000000000800000 RBX: 0000000000000000 RCX: 0000000020000020
[  256.288667][   T30] RDX: 0000000000000000 RSI: ffffffff8beae6c0 RDI: ffffffff8c3fba40
[  256.296773][   T30] RBP: ffffc90004b57ec8 R08: ffffffff8ff74aef R09: 1ffffffff1fee95d
[  256.304958][   T30] R10: dffffc0000000000 R11: fffffbfff1fee95e R12: 1ffff9200096af7d
[  256.314203][   T30] R13: 1ffff9200096af08 R14: 0000000020800000 R15: 0000000000800000
[  256.322342][   T30]  userfaultfd_ioctl+0x28e7/0x70a0
[  256.327548][   T30]  ? stack_trace_save+0x118/0x1d0
[  256.338054][   T30]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  256.344088][   T30]  ? stack_depot_save_flags+0x29/0x830
[  256.349756][   T30]  ? kasan_save_track+0x51/0x80
[  256.355572][   T30]  ? kasan_save_track+0x3f/0x80
[  256.360504][   T30]  ? kasan_save_free_info+0x40/0x50
[  256.365896][   T30]  ? poison_slab_object+0xe0/0x150
[  256.378265][   T30]  ? __kasan_slab_free+0x37/0x60
[  256.383459][   T30]  ? kfree+0x149/0x360
[  256.387601][   T30]  ? tomoyo_path_number_perm+0x68d/0x880
[  256.393697][   T30]  ? security_file_ioctl+0x75/0xb0
[  256.398870][   T30]  ? __se_sys_ioctl+0x47/0x170
[  256.403733][   T30]  ? do_syscall_64+0xf3/0x230
[  256.408439][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.416036][   T30]  ? do_vfs_ioctl+0xf0e/0x2e50
[  256.420992][   T30]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  256.426091][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  256.432715][   T30]  ? tomoyo_path_number_perm+0x208/0x880
[  256.438400][   T30]  ? __pfx_lock_release+0x10/0x10
[  256.444699][   T30]  ? kfree+0x149/0x360
[  256.448847][   T30]  ? tomoyo_path_number_perm+0x208/0x880
[  256.460366][   T30]  ? smack_log+0x123/0x540
[  256.466521][   T30]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  256.475008][   T30]  ? __pfx_smack_log+0x10/0x10
[  256.479862][   T30]  ? smk_access+0x4ab/0x4e0
[  256.484583][   T30]  ? smk_tskacc+0x300/0x370
[  256.489258][   T30]  ? smack_file_ioctl+0x2fa/0x3a0
[  256.494570][   T30]  ? __pfx_smack_file_ioctl+0x10/0x10
[  256.500114][   T30]  ? __fget_files+0x3f6/0x470
[  256.504934][   T30]  ? __fget_files+0x29/0x470
[  256.509560][   T30]  ? bpf_lsm_file_ioctl+0x9/0x10
[  256.514897][   T30]  ? security_file_ioctl+0x87/0xb0
[  256.520097][   T30]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  256.525876][ T5245] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  256.549519][   T30]  __se_sys_ioctl+0xfc/0x170
[  256.555433][   T30]  do_syscall_64+0xf3/0x230
[  256.560074][   T30]  ? clear_bhb_loop+0x35/0x90
[  256.564963][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.571041][   T30] RIP: 0033:0x7f9f7b37def9
[  256.577508][   T30] RSP: 002b:00007f9f7c156038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  256.586175][   T30] RAX: ffffffffffffffda RBX: 00007f9f7b536058 RCX: 00007f9f7b37def9
[  256.594525][   T30] RDX: 0000000020000000 RSI: 00000000c028aa03 RDI: 0000000000000009
[  256.603228][   T30] RBP: 00007f9f7b3f09f6 R08: 0000000000000000 R09: 0000000000000000
[  256.611415][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  256.619442][   T30] R13: 0000000000000000 R14: 00007f9f7b536058 R15: 00007ffdbd0c7698
[  256.627692][   T30]  </TASK>
[  256.631012][   T30] INFO: task syz.3.122:5733 blocked for more than 145 seconds.
[  256.649831][   T30]       Not tainted 6.11.0-rc7-syzkaller #0
[  256.666442][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  256.699113][   T30] task:syz.3.122       state:D stack:24672 pid:5733  tgid:5733  ppid:5225   flags:0x00000004
[  256.720769][   T30] Call Trace:
[  256.724163][   T30]  <TASK>
[  256.727142][   T30]  __schedule+0x17ae/0x4a10
[  256.750816][   T30]  ? __pfx___schedule+0x10/0x10
[  256.755773][   T30]  ? __pfx_lock_release+0x10/0x10
[  256.770762][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  256.776302][   T30]  ? schedule+0x90/0x320
[  256.791922][   T30]  schedule+0x14b/0x320
[  256.796186][   T30]  schedule_preempt_disabled+0x13/0x30
[  256.810688][   T30]  __mutex_lock+0x6a4/0xd70
[  256.815279][   T30]  ? __mutex_lock+0x527/0xd70
[  256.820036][   T30]  ? hugetlb_fault+0x56f/0x3770
[  256.825162][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  256.830264][   T30]  hugetlb_fault+0x56f/0x3770
[  256.835116][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  256.841769][   T30]  ? __lock_acquire+0x137a/0x2040
[  256.846848][   T30]  ? __pfx_hugetlb_fault+0x10/0x10
[  256.852068][   T30]  ? reacquire_held_locks+0x3eb/0x690
[  256.857516][   T30]  ? lock_vma_under_rcu+0x2f9/0x6e0
[  256.864789][   T30]  ? __pfx_reacquire_held_locks+0x10/0x10
[  256.870571][   T30]  handle_mm_fault+0x183d/0x1ad0
[  256.876802][   T30]  ? lock_vma_under_rcu+0x18a/0x6e0
[  256.885617][   T30]  ? __pfx_lock_release+0x10/0x10
[  256.895036][   T30]  ? lock_vma_under_rcu+0x2f9/0x6e0
[  256.900283][   T30]  ? __pfx_handle_mm_fault+0x10/0x10
[  256.906882][   T30]  ? lock_vma_under_rcu+0x592/0x6e0
[  256.912405][   T30]  ? lock_vma_under_rcu+0x18a/0x6e0
[  256.917653][   T30]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  256.923674][   T30]  ? exc_page_fault+0x113/0x8c0
[  256.928584][   T30]  exc_page_fault+0x459/0x8c0
[  256.933377][   T30]  asm_exc_page_fault+0x26/0x30
[  256.938274][   T30] RIP: 0033:0x7f8ac5045063
[  256.942921][   T30] RSP: 002b:00007ffed7accd60 EFLAGS: 00010246
[  256.949041][   T30] RAX: 0000000020000040 RBX: 0000000000000008 RCX: 0000000000000000
[  256.957171][   T30] RDX: 0000000000010001 RSI: 0000000000000000 RDI: 000055556b3ea3c8
[  256.965327][   T30] RBP: 00007ffed7acce78 R08: 0000000000000000 R09: 0000000000000000
[  256.973394][   T30] R10: 0000000000000000 R11: 0000000000000002 R12: 000000000001ab64
[  256.984057][   T30] R13: 00007ffed7accea0 R14: 0000000000000032 R15: fffffffffffffffe
[  256.992262][   T30]  </TASK>
[  257.016191][   T30] 
[  257.016191][   T30] Showing all locks held in the system:
[  257.045050][   T30] 1 lock held by khungtaskd/30:
[  257.049981][   T30]  #0: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  257.061484][   T30] 1 lock held by udevd/4677:
[  257.066134][   T30] 2 locks held by getty/4983:
[  257.072221][   T30]  #0: ffff88802fb3c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  257.083750][   T30]  #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00
[  257.096549][   T30] 2 locks held by syz.2.33/5430:
[  257.101863][   T30]  #0: ffff88801bbfd3d0 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0
[  257.112399][   T30]  #1: ffff888020ea8578 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770
[  257.123515][   T30] 3 locks held by syz.2.33/5431:
[  257.128524][   T30]  #0: ffff8880668d9e18 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70
[  257.138774][   T30]  #1: ffff888020ea8578 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770
[  257.149818][   T30]  #2: ffff888034cfa0e8 (&resv_map->rw_sema){.+.+}-{3:3}, at: hugetlb_fault+0x675/0x3770
[  257.160915][   T30] 2 locks held by syz.2.33/5434:
[  257.165896][   T30]  #0: ffff8880668d9e18 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70
[  257.177151][   T30]  #1: ffff888020ea8578 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x104d/0x3a90
[  257.189331][   T30] 2 locks held by syz.3.122/5733:
[  257.194675][   T30]  #0: ffff888024884df0 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0
[  257.206055][   T30]  #1: ffff888020ea8578 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770
[  257.217202][   T30] 3 locks held by syz.3.762/7991:
[  257.222301][   T30]  #0: ffff888026e210a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x5c/0x200
[  257.232531][   T30]  #1: ffff88807e4960a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0x80/0x200
[  257.242832][   T30]  #2: ffffffff8e73d5c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530
[  257.253129][   T30] 
[  257.255476][   T30] =============================================
[  257.255476][   T30] 
[  257.357941][   T30] NMI backtrace for cpu 0
[  257.362357][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller #0
[  257.371171][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  257.381268][   T30] Call Trace:
[  257.384590][   T30]  <TASK>
[  257.387554][   T30]  dump_stack_lvl+0x241/0x360
[  257.392281][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  257.397526][   T30]  ? __pfx__printk+0x10/0x10
[  257.402166][   T30]  ? vprintk_emit+0x667/0x7c0
[  257.406925][   T30]  ? __pfx_vprintk_emit+0x10/0x10
[  257.412014][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  257.417038][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  257.422543][   T30]  ? _printk+0xd5/0x120
[  257.426712][   T30]  ? __pfx__printk+0x10/0x10
[  257.431314][   T30]  ? __wake_up_klogd+0xcc/0x110
[  257.436181][   T30]  ? __pfx__printk+0x10/0x10
[  257.440782][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  257.445818][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  257.451816][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  257.457815][   T30]  watchdog+0xff4/0x1040
[  257.462080][   T30]  ? watchdog+0x1ea/0x1040
[  257.466518][   T30]  ? __pfx_watchdog+0x10/0x10
[  257.471212][   T30]  kthread+0x2f0/0x390
[  257.475303][   T30]  ? __pfx_watchdog+0x10/0x10
[  257.479997][   T30]  ? __pfx_kthread+0x10/0x10
[  257.484631][   T30]  ret_from_fork+0x4b/0x80
[  257.489064][   T30]  ? __pfx_kthread+0x10/0x10
[  257.493677][   T30]  ret_from_fork_asm+0x1a/0x30
[  257.498481][   T30]  </TASK>
[  257.502614][   T30] Sending NMI from CPU 0 to CPUs 1:
[  257.508604][    C1] NMI backtrace for cpu 1
[  257.508620][    C1] CPU: 1 UID: 0 PID: 2980 Comm: kworker/u8:8 Not tainted 6.11.0-rc7-syzkaller #0
[  257.508639][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  257.508651][    C1] Workqueue: bat_events batadv_nc_worker
[  257.508681][    C1] RIP: 0010:__local_bh_enable_ip+0x132/0x200
[  257.508707][    C1] Code: 05 2b 7b ac 7e 25 00 ff 00 00 3d 00 02 00 00 75 0a 48 8b 7c 24 18 e8 ad 3b 18 00 b8 01 00 00 00 44 29 f8 65 01 05 06 7b ac 7e <65> 8b 05 ff 7a ac 7e a9 00 ff ff 00 75 19 48 c7 c7 40 ca e9 8b e8
[  257.508722][    C1] RSP: 0018:ffffc90009617a00 EFLAGS: 00000083
[  257.508737][    C1] RAX: 00000000fffffe00 RBX: 1ffff920012c2f44 RCX: ffffffff9a0fd903
[  257.508750][    C1] RDX: dffffc0000000000 RSI: ffffffff8beae6c0 RDI: ffffffff8c3fba40
[  257.508763][    C1] RBP: ffffc90009617ab0 R08: ffffffff8ff74aef R09: 1ffffffff1fee95d
[  257.508776][    C1] R10: dffffc0000000000 R11: fffffbfff1fee95e R12: dffffc0000000000
[  257.508789][    C1] R13: 1ffff920012c2f48 R14: ffffc90009617a40 R15: 0000000000000201
[  257.508802][    C1] FS:  0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000
[  257.508817][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  257.508829][    C1] CR2: 00007fed4ef042d8 CR3: 000000000e534000 CR4: 00000000003506f0
[  257.508845][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  257.508856][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  257.508867][    C1] Call Trace:
[  257.508873][    C1]  <NMI>
[  257.508881][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  257.508904][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  257.508936][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  257.508958][    C1]  ? nmi_handle+0x2a/0x5a0
[  257.508984][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  257.509006][    C1]  ? nmi_handle+0x14f/0x5a0
[  257.509021][    C1]  ? nmi_handle+0x2a/0x5a0
[  257.509039][    C1]  ? __local_bh_enable_ip+0x132/0x200
[  257.509061][    C1]  ? default_do_nmi+0x63/0x160
[  257.509084][    C1]  ? exc_nmi+0x123/0x1f0
[  257.509106][    C1]  ? end_repeat_nmi+0xf/0x53
[  257.509135][    C1]  ? __local_bh_enable_ip+0x132/0x200
[  257.509157][    C1]  ? __local_bh_enable_ip+0x132/0x200
[  257.509181][    C1]  ? __local_bh_enable_ip+0x132/0x200
[  257.509203][    C1]  </NMI>
[  257.509209][    C1]  <TASK>
[  257.509216][    C1]  ? batadv_nc_purge_paths+0x312/0x3b0
[  257.509243][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  257.509267][    C1]  ? batadv_nc_purge_paths+0xe8/0x3b0
[  257.509294][    C1]  ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10
[  257.509342][    C1]  batadv_nc_purge_paths+0x312/0x3b0
[  257.509378][    C1]  batadv_nc_worker+0x328/0x610
[  257.509403][    C1]  ? batadv_nc_worker+0xcb/0x610
[  257.509431][    C1]  ? process_scheduled_works+0x945/0x1830
[  257.509455][    C1]  process_scheduled_works+0xa2c/0x1830
[  257.509495][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  257.509524][    C1]  ? assign_work+0x364/0x3d0
[  257.509549][    C1]  worker_thread+0x86d/0xd10
[  257.509582][    C1]  ? __kthread_parkme+0x169/0x1d0
[  257.509609][    C1]  ? __pfx_worker_thread+0x10/0x10
[  257.509632][    C1]  kthread+0x2f0/0x390
[  257.509658][    C1]  ? __pfx_worker_thread+0x10/0x10
[  257.509681][    C1]  ? __pfx_kthread+0x10/0x10
[  257.509708][    C1]  ret_from_fork+0x4b/0x80
[  257.509733][    C1]  ? __pfx_kthread+0x10/0x10
[  257.509759][    C1]  ret_from_fork_asm+0x1a/0x30
[  257.509793][    C1]  </TASK>
[  257.528324][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  257.528345][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller #0
[  257.528373][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  257.528388][   T30] Call Trace:
[  257.528398][   T30]  <TASK>
[  257.528409][   T30]  dump_stack_lvl+0x241/0x360
[  257.528445][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  257.528474][   T30]  ? __pfx__printk+0x10/0x10
[  257.528496][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  257.528539][   T30]  ? vscnprintf+0x5d/0x90
[  257.528572][   T30]  panic+0x349/0x860
[  257.528598][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  257.528632][   T30]  ? __pfx_panic+0x10/0x10
[  257.528654][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  257.528682][   T30]  ? __irq_work_queue_local+0x137/0x410
[  257.528717][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  257.528743][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  257.528774][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  257.528810][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  257.528845][   T30]  watchdog+0x1033/0x1040
[  257.528881][   T30]  ? watchdog+0x1ea/0x1040
[  257.528930][   T30]  ? __pfx_watchdog+0x10/0x10
[  257.528964][   T30]  kthread+0x2f0/0x390
[  257.529000][   T30]  ? __pfx_watchdog+0x10/0x10
[  257.529031][   T30]  ? __pfx_kthread+0x10/0x10
[  257.529068][   T30]  ret_from_fork+0x4b/0x80
[  257.529101][   T30]  ? __pfx_kthread+0x10/0x10
[  257.529137][   T30]  ret_from_fork_asm+0x1a/0x30
[  257.529198][   T30]  </TASK>
[  257.534605][   T30] Kernel Offset: disabled
[  257.992286][   T30] Rebooting in 86400 seconds..