last executing test programs:

4m30.921702506s ago: executing program 3 (id=444):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000440)={0x8000001, 0x0, 0x0, 0x3, 0x80000000})

4m30.790780388s ago: executing program 3 (id=446):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8)
open_tree(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r6=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", <r7=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r7, <r8=>0xffffffffffffffff})
close_range(r4, r5, 0x0)
ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000b08000700e80700000800070001000000080009007f00000008000700090000000800080008000000080006"], 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x1ffff, 0x5, 0x0, {0x5, 0x2, 0x48b, 0xa, 0x40000000000000b, 0xd, 0xfff7fffc, 0x4, 0x101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4m29.649719253s ago: executing program 3 (id=448):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
sendto$packet(r0, 0x0, 0x0, 0x805, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r1, 0x4, 0x40800)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
ftruncate(r2, 0x2000009)
sendfile(r1, r2, 0x0, 0x7ffff004)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, 0x0)

4m27.678623254s ago: executing program 3 (id=454):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000010a000000fc010000009900000000000000000000000000000400"/180], 0xfc}}, 0x0)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
write$binfmt_misc(r0, &(0x7f0000000000), 0x6)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket$kcm(0x2d, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000004400)='/dev/comedi4\x00', 0x0, 0x0)
ioctl$COMEDI_CMDTEST(r5, 0x8050640a, &(0x7f0000000000)={0x1, 0x1, 0xffffffff, 0x4, 0x54, 0xc0000000, 0x40, 0x7, 0x20, 0x1000c190, 0x100, 0x8, 0x0, 0x0, 0x0})
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)

4m26.188932242s ago: executing program 3 (id=458):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
memfd_create(0x0, 0xe)
close(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000040)=0xad59)
fsopen(&(0x7f0000000340)='afs\x00', 0x1)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave'])
chdir(&(0x7f0000000240)='./file0\x00')
open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)

4m20.676910899s ago: executing program 3 (id=474):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)='F', 0x1, 0x0, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0xe0}, 0x14)
recvmmsg(r2, &(0x7f0000000480), 0x4000003, 0x10022, 0x0)

4m4.937996609s ago: executing program 32 (id=474):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)='F', 0x1, 0x0, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0xe0}, 0x14)
recvmmsg(r2, &(0x7f0000000480), 0x4000003, 0x10022, 0x0)

15.809311784s ago: executing program 0 (id=980):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x9e6e, 0x1000, 0x2}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x20000044})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000010000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r4, r5}, 0xc)

13.105170093s ago: executing program 0 (id=983):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
syz_usb_disconnect(r1)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000f14010027bd7000fcdbdf250b00450075766572627376"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
close_range(r0, 0xffffffffffffffff, 0x0)

11.012426335s ago: executing program 5 (id=990):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40010)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000001800000000000000000080005400000000005"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56})
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r1)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000340)={'team0\x00', <r8=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x1, '\x00', r8, 0x2, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'veth0_to_hsr\x00'})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r11=>0x0})
setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000000)={@remote, r11}, 0x14)
sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r11, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0)
getsockname$packet(r5, &(0x7f0000000700)={0x11, 0x0, <r12=>0x0}, &(0x7f0000000780)=0x14)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x88, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x40}, @ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x3375cb7aa35f5ba3}, 0xc000)

10.860380889s ago: executing program 4 (id=992):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
futex(0x0, 0x4, 0x2, 0x0, 0x0, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x621c2, 0x0)
ftruncate(r0, 0x8800000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
io_setup(0x9, &(0x7f0000000b80)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000740)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}])
write$cgroup_subtree(r1, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
landlock_create_ruleset(&(0x7f0000000180)={0x400, 0x2, 0x1}, 0x62, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000002100)={0x2, 0x2, 0x4, 0x4c})
socket$inet6_udp(0xa, 0x2, 0x0)

10.645666149s ago: executing program 0 (id=993):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000100000000000000004000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008001240"], 0x5c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00005000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c010c26a04883ad2b81d242efa8698dfa871c51852e4451b57d037ad3c045942824251d"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8)
recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x82}], 0x2}, 0xa1}], 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffff}, 0x18)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r3, 0x852ac000)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a3100000000050001000700eff94c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

10.597730353s ago: executing program 1 (id=994):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

10.462365076s ago: executing program 4 (id=995):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r3)
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100})
getdents(r4, &(0x7f0000000440)=""/4090, 0xffa)

10.393635582s ago: executing program 5 (id=996):
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b00)={0x58, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4c0d0)

10.325566219s ago: executing program 1 (id=997):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x50, 0x30, 0xffff, 0x70bd2a, 0x0, {}, [{0x3c, 0x1, [@m_police={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0d4}, 0x0)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80001, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r8, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r2}, 0x20)
sendmmsg$inet(r2, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)="a9", 0xfffff}], 0x1}}], 0x1, 0x54)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
recvfrom(r1, &(0x7f0000000300)=""/65, 0x41, 0x40014141, 0x0, 0x0)
r9 = syz_usb_connect(0x1, 0x371, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES64=r0, @ANYBLOB, @ANYRESHEX=r1], 0x0)
syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0)
syz_usb_control_io$uac1(r9, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)

8.278800028s ago: executing program 5 (id=998):
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB], 0x50)
syz_open_dev$tty20(0xc, 0x4, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket(0x1000000000000010, 0x80802, 0x0)
bind$netlink(r0, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000001100)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9}, 0x10}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x83)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0))
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
read$dsp(r2, &(0x7f00000001c0)=""/95, 0x5f)

8.176116127s ago: executing program 2 (id=999):
open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x2}}], 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)="a39c1fb4d127f197e8e3a41c9fe5567d9137e293a21d262ad6ead1253f31493569f5737c8ed607d034", 0x29}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b", 0x42}, {&(0x7f0000000780)}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa82a0dbb3", 0x47}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317", 0x8a}], 0x5}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

8.049630828s ago: executing program 4 (id=1000):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0)

6.097144698s ago: executing program 1 (id=1001):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_open_procfs(0x0, 0x0)
getdents(r0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000100)=0x5, 0x4)

5.887118768s ago: executing program 4 (id=1002):
socket(0x10, 0x3, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0x0, 0x6}, {0x0, 0x1, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000002140)=0x1)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@dstopts_2292={{0xb8, 0x29, 0x4, {0x4, 0x13, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @ra={0x5, 0x2, 0xbf4}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x70, 0x29, 0x36, {0x5e, 0xa, '\x00', [@pad1, @pad1, @padn, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x2, 0x966, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}, @generic={0x1, 0x3, "2bdb86"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x178}}], 0x1, 0x810)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r5 = accept4(r4, 0x0, 0x0, 0x800)
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r6, 0x11, 0x0, 0x4, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

5.649587919s ago: executing program 1 (id=1003):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000100000000000000004000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008001240"], 0x5c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x38, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x28000080)

5.455019357s ago: executing program 5 (id=1004):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x42}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x8884)

5.420784611s ago: executing program 1 (id=1005):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020)

4.957560413s ago: executing program 2 (id=1006):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x5, &(0x7f00000002c0)=0x2)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
clock_gettime(0x1, &(0x7f0000000000)={<r4=>0x0, <r5=>0x0})
clock_settime(0x0, &(0x7f0000000040)={r4, r5+10000000})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18)
r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r7, 0x5, &(0x7f0000000000)='ro\x00', 0x0, 0x4)

3.8992895s ago: executing program 2 (id=1007):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_open_procfs(0x0, 0x0)
preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/39, 0x27}], 0x1, 0x0, 0xfffffffd)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r7 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r0, r6})
sendmmsg$inet(r7, &(0x7f0000001500)=[{{0x0, 0xffffffcf, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

3.894122081s ago: executing program 5 (id=1008):
r0 = socket$unix(0x1, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0xc000)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4)

3.80163178s ago: executing program 0 (id=1009):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4)

2.570573893s ago: executing program 0 (id=1010):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48)
r1 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000)
fallocate(r2, 0x4b, 0x9, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002400)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002500)=[@ip_retopts={{0x10}}], 0x10}, 0x4080)
socket(0x10, 0x803, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

2.049857991s ago: executing program 2 (id=1011):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x1000, 0xe83c}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c801}, 0x0)

1.677775915s ago: executing program 2 (id=1012):
r0 = socket(0xa, 0x3, 0x3a)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

1.480587594s ago: executing program 5 (id=1013):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

1.279905752s ago: executing program 2 (id=1014):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
socket(0x14, 0x1, 0x0)

1.013651086s ago: executing program 4 (id=1015):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000002c0)={0xff, 0x5, 0x86, 0x1, 0x7, 0x29})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0xc0)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

202.909411ms ago: executing program 1 (id=1016):
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket(0x2b, 0x1, 0x1)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x5)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
openat$mice(0xffffffffffffff9c, 0x0, 0x80)
close_range(r0, 0xffffffffffffffff, 0x0)

69.744494ms ago: executing program 4 (id=1017):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x34, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800)
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb3", 0x5)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050003000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0a0018000300400303"], 0x28}}, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r11 = socket$pppoe(0x18, 0x1, 0x0)
sendmmsg(r11, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)

0s ago: executing program 0 (id=1018):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x3000c003}, 0x80)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

kernel console output (not intermixed with test programs):

high-speed USB device number 2 using dummy_hcd
[   93.639781][ T4325] usb 2-1: Using ep0 maxpacket: 8
[   93.668525][ T4325] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[   93.707812][ T4325] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[   93.790285][ T4325] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   93.867843][ T4325] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   93.933812][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.020540][ T4325] usbtmc 2-1:16.0: bulk endpoints not found
[   94.266295][ T4318] usb 2-1: USB disconnect, device number 2
[   94.316446][ T4446] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14'.
[   94.345830][ T4446] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14'.
[   95.203453][ T4457] loop6: detected capacity change from 0 to 4095
[   95.230090][    C1] I/O error, dev loop6, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   95.240280][    T0] NOHZ tick-stop error: local softirq work is pending, handler #212!!!
[   95.249069][    T0] NOHZ tick-stop error: local softirq work is pending, handler #292!!!
[   95.257870][    C0] I/O error, dev loop6, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.267625][    T0] NOHZ tick-stop error: local softirq work is pending, handler #392!!!
[   95.267623][    C0] Buffer I/O error on dev loop6, logical block 480, async page read
[   95.399291][ T4256] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   95.609210][ T4256] usb 4-1: Using ep0 maxpacket: 16
[   95.621137][ T4256] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[   95.641163][ T4256] usb 4-1: config 0 has no interface number 0
[   95.699068][ T4256] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   95.718597][ T4256] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   95.766464][ T4256] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   95.801686][ T4256] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   95.823177][ T4256] usb 4-1: Product: syz
[   95.830952][ T4256] usb 4-1: SerialNumber: syz
[   95.865130][ T4256] usb 4-1: config 0 descriptor??
[   95.912996][ T4256] cm109 4-1:0.8: invalid payload size 0, expected 4
[   95.949616][ T4256] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input5
[   96.131225][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[   96.149187][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[   96.159088][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[   96.166398][ T4256] usb 4-1: USB disconnect, device number 2
[   96.207149][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -2
[   96.215445][ T4256] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[   96.607405][ T4473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23'.
[   97.448658][ T4479] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer.
[   97.829306][ T4318] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   98.030726][ T4318] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[   98.073533][ T4318] usb 4-1: config 0 has no interface number 0
[   98.091753][ T4318] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[   98.104088][ T4483] Zero length message leads to an empty skb
[   98.133096][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.159227][ T4318] usb 4-1: Product: syz
[   98.169313][ T4318] usb 4-1: Manufacturer: syz
[   98.190361][ T4318] usb 4-1: SerialNumber: syz
[   98.223774][ T4318] usb 4-1: config 0 descriptor??
[   98.261943][ T4318] yurex 4-1:0.50: Could not find endpoints
[   99.144542][   T22] usb 4-1: USB disconnect, device number 3
[   99.542519][ T4483] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.550448][ T4483] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.709336][ T4340] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   99.922037][ T4340] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   99.931347][ T4340] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.942379][ T4340] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[   99.951777][ T4340] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.982886][ T4340] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   99.992640][ T4340] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  100.001118][ T4340] usb 5-1: Product: syz
[  100.005517][ T4340] usb 5-1: Manufacturer: syz
[  100.015687][ T4340] cdc_wdm 5-1:1.0: skipping garbage
[  100.023482][ T4340] cdc_wdm 5-1:1.0: skipping garbage
[  100.043640][ T4340] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  100.054887][ T4340] cdc_wdm 5-1:1.0: Unknown control protocol
[  100.650123][ T4483] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.732425][ T4483] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.820861][    T7] usb 5-1: USB disconnect, device number 2
[  101.632610][ T4483] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.655187][ T4483] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.665549][ T4483] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.678855][ T4483] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.302515][ T4541] program syz.1.44 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  103.471848][ T4545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'.
[  103.521073][ T4545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.46'.
[  103.655465][ T4552] fuse: Bad value for 'fd'
[  106.059245][   T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  106.087278][ T4592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.59'.
[  106.219093][   T14] usb 3-1: device descriptor read/64, error -71
[  106.489074][   T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  106.679680][ T4601] fuse: Bad value for 'fd'
[  107.539082][   T14] usb 3-1: device descriptor read/64, error -71
[  107.659975][   T14] usb usb3-port1: attempt power cycle
[  107.979093][ T4256] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  108.074120][   T14] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  108.109847][   T14] usb 3-1: device descriptor read/8, error -71
[  108.202417][ T4256] usb 5-1: Using ep0 maxpacket: 16
[  108.218809][ T4256] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  108.313330][ T4256] usb 5-1: config 0 has no interface number 0
[  108.339780][ T4256] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  108.391524][ T4256] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  108.409128][   T14] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  108.456287][ T4256] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  108.461091][   T14] usb 3-1: device descriptor read/8, error -71
[  108.492301][ T4256] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  108.539077][ T4256] usb 5-1: Product: syz
[  108.546466][ T4256] usb 5-1: SerialNumber: syz
[  108.571100][ T4256] usb 5-1: config 0 descriptor??
[  108.609077][ T4256] cm109 5-1:0.8: invalid payload size 0, expected 4
[  108.640157][   T14] usb usb3-port1: unable to enumerate USB device
[  108.667191][ T4256] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input6
[  108.815101][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  108.823537][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  108.832290][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  108.841516][ T4256] usb 5-1: USB disconnect, device number 3
[  108.852488][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  108.859541][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  108.879078][ T4256] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  109.627171][ T4639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'.
[  110.259213][  T126] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  110.494910][  T126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.534095][  T126] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  110.604649][  T126] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  110.676606][  T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.755217][  T126] usb 1-1: config 0 descriptor??
[  110.834293][  T126] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  110.893044][  T126] dvb-usb: bulk message failed: -22 (3/0)
[  110.968312][  T126] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  111.039444][  T126] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  111.096046][  T126] usb 1-1: media controller created
[  111.142051][  T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  111.235176][  T126] dvb-usb: bulk message failed: -22 (6/0)
[  111.272811][  T126] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  111.305444][  T126] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7
[  111.324791][  T126] dvb-usb: schedule remote query interval to 150 msecs.
[  111.336152][  T126] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  111.495660][  T126] dvb-usb: bulk message failed: -22 (1/0)
[  111.504172][  T126] dvb-usb: error while querying for an remote control event.
[  111.679077][   T14] dvb-usb: bulk message failed: -22 (1/0)
[  111.685016][   T14] dvb-usb: error while querying for an remote control event.
[  111.891766][   T14] dvb-usb: bulk message failed: -22 (1/0)
[  111.898221][   T14] dvb-usb: error while querying for an remote control event.
[  112.079354][   T14] dvb-usb: bulk message failed: -22 (1/0)
[  112.086900][   T14] dvb-usb: error while querying for an remote control event.
[  112.179086][ T4310] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  112.261007][   T14] dvb-usb: bulk message failed: -22 (1/0)
[  112.274558][   T14] dvb-usb: error while querying for an remote control event.
[  112.389058][ T4310] usb 5-1: Using ep0 maxpacket: 16
[  112.399727][ T4310] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  112.425837][ T4310] usb 5-1: config 0 has no interface number 0
[  112.459228][   T14] dvb-usb: bulk message failed: -22 (1/0)
[  112.459224][ T4310] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  112.480652][   T14] dvb-usb: error while querying for an remote control event.
[  112.585033][ T4310] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  112.669375][  T126] dvb-usb: bulk message failed: -22 (1/0)
[  112.675658][  T126] dvb-usb: error while querying for an remote control event.
[  112.695905][ T4310] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  112.756575][ T4310] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  112.789230][ T4310] usb 5-1: Product: syz
[  112.793473][ T4310] usb 5-1: SerialNumber: syz
[  112.829819][ T4310] usb 5-1: config 0 descriptor??
[  112.850631][ T4310] cm109 5-1:0.8: invalid payload size 0, expected 4
[  112.879113][  T126] dvb-usb: bulk message failed: -22 (1/0)
[  112.889085][  T126] dvb-usb: error while querying for an remote control event.
[  112.897711][ T4310] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input8
[  113.047806][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  113.055338][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  113.059418][  T126] dvb-usb: bulk message failed: -22 (1/0)
[  113.066415][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  113.079227][  T126] dvb-usb: error while querying for an remote control event.
[  113.106224][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  113.119214][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  113.129129][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  113.137059][ T4310] usb 5-1: USB disconnect, device number 4
[  113.180588][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  113.201993][ T4310] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  113.251151][  T126] dvb-usb: bulk message failed: -22 (1/0)
[  113.257482][  T126] dvb-usb: error while querying for an remote control event.
[  113.459308][  T126] dvb-usb: bulk message failed: -22 (1/0)
[  113.465198][  T126] dvb-usb: error while querying for an remote control event.
[  113.611662][ T4682] netlink: 'syz.2.87': attribute type 12 has an invalid length.
[  113.659200][  T126] dvb-usb: bulk message failed: -22 (1/0)
[  113.664999][  T126] dvb-usb: error while querying for an remote control event.
[  113.729454][  T126] usb 1-1: USB disconnect, device number 2
[  113.840449][  T126] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  114.227812][ T4696] netlink: 'syz.2.92': attribute type 10 has an invalid length.
[  114.262025][ T4696] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.290610][ T4696] device bridge_slave_1 left promiscuous mode
[  114.306407][ T4696] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.355464][ T4696] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  114.559059][   T14] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  114.761149][   T14] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  114.800193][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.833790][   T14] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  114.902855][   T14] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  114.926877][   T14] usb 4-1: Manufacturer: syz
[  114.948295][   T14] usb 4-1: config 0 descriptor??
[  114.979211][  T126] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  115.109392][   T14] rc_core: IR keymap rc-hauppauge not found
[  115.116582][   T14] Registered IR keymap rc-empty
[  115.135316][   T14] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  115.169072][  T126] usb 2-1: Using ep0 maxpacket: 16
[  115.176765][  T126] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  115.199257][   T14] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9
[  115.219859][  T126] usb 2-1: config 0 has no interface number 0
[  115.248412][  T126] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  115.309161][  T126] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  115.358566][  T126] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  115.382384][  T126] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  115.406371][  T126] usb 2-1: Product: syz
[  115.473562][  T126] usb 2-1: SerialNumber: syz
[  115.544997][  T126] usb 2-1: config 0 descriptor??
[  115.633485][  T126] cm109 2-1:0.8: invalid payload size 0, expected 4
[  115.710797][  T126] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input10
[  115.748207][ T4310] usb 4-1: USB disconnect, device number 4
[  115.847966][    C0] cm109_urb_ctl_callback: 1 callbacks suppressed
[  115.847989][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  115.861942][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  115.862139][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  115.863260][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  115.863483][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  115.863709][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  115.863927][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  115.906530][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  115.913770][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  115.921246][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  115.992737][  T126] usb 2-1: USB disconnect, device number 3
[  115.992803][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  116.115387][  T126] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  118.560277][ T4773] netlink: 'syz.3.115': attribute type 12 has an invalid length.
[  118.574217][ T4773] netlink: 'syz.3.115': attribute type 29 has an invalid length.
[  118.604415][ T4773] netlink: 148 bytes leftover after parsing attributes in process `syz.3.115'.
[  118.618863][ T4773] netlink: 51 bytes leftover after parsing attributes in process `syz.3.115'.
[  118.632419][ T4256] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  118.819626][ T4256] usb 1-1: Using ep0 maxpacket: 8
[  118.827523][ T4256] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  118.864094][ T4256] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  118.943389][ T4256] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  119.024962][ T4256] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  119.058702][ T4256] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  119.116334][ T4256] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  119.222048][ T4256] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  119.284428][ T4256] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  119.302258][ T4256] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  119.328056][ T4256] usb 1-1: string descriptor 0 read error: -22
[  119.350785][ T4256] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  119.379469][ T4256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.456135][ T4256] adutux 1-1:168.0: interrupt endpoints not found
[  119.889951][ T4763] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  119.918067][ T4763] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  120.222413][ T4256] usb 1-1: USB disconnect, device number 3
[  120.545646][ T4801] netlink: 276 bytes leftover after parsing attributes in process `syz.2.124'.
[  120.576550][ T4801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.124'.
[  120.588588][ T4801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'.
[  120.703131][ T4801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'.
[  121.109070][  T126] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  121.262313][ T4808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'.
[  121.311501][  T126] usb 3-1: config 1 has an invalid descriptor of length 76, skipping remainder of the config
[  121.349364][  T126] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  121.425949][  T126] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  121.492302][  T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  121.537427][  T126] usb 3-1: SerialNumber: syz
[  121.581050][  T126] usb 3-1: bad CDC descriptors
[  124.162415][ T4310] usb 3-1: USB disconnect, device number 6
[  125.011180][  T126] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  125.047521][ T4865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.146'.
[  125.209202][  T126] usb 3-1: Using ep0 maxpacket: 32
[  125.232363][  T126] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  125.266229][  T126] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  125.295668][  T126] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  125.350430][  T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  125.383150][  T126] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  125.408497][  T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  125.455757][  T126] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  125.487740][  T126] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  125.544845][  T126] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  125.574837][  T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.630776][  T126] usb 3-1: config 0 descriptor??
[  125.914381][ T4861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.965332][ T4861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.055719][  T126] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  126.115081][  T126] usb 3-1: USB disconnect, device number 7
[  126.144332][  T126] usblp0: removed
[  126.572780][ T4878] mmap: syz.4.150 (4878) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  126.845153][ T4883] batman_adv: batadv0: Adding interface: dummy0
[  126.915875][ T4883] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.209300][ T4883] batman_adv: batadv0: Interface activated: dummy0
[  127.261256][ T4884] batadv0: mtu less than device minimum
[  127.282765][ T4884] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.295593][ T4884] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.308008][ T4884] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.320487][ T4884] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.332801][ T4884] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.344601][ T4884] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.356226][ T4884] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.368615][ T4884] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.380339][ T4884] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  130.527461][ T4932] process 'syz.4.165' launched './file2' with NULL argv: empty string added
[  132.899125][ T4256] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  133.002873][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  133.009988][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  133.090583][ T4256] usb 3-1: Using ep0 maxpacket: 8
[  133.105096][ T4256] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  133.134100][ T4256] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  133.218019][ T4256] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  133.250646][ T4256] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  133.305775][ T4256] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  133.380453][ T4256] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  133.430785][ T4256] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  133.448305][ T4256] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  133.480047][ T4256] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  133.532361][ T4991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.190'.
[  133.540339][ T4256] usb 3-1: string descriptor 0 read error: -22
[  133.565028][ T4256] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  133.585761][ T4256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.629394][ T4256] adutux 3-1:168.0: interrupt endpoints not found
[  134.067156][   T14] usb 3-1: USB disconnect, device number 8
[  134.380608][ T5007] netlink: 32 bytes leftover after parsing attributes in process `syz.1.193'.
[  134.729835][ T5017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'.
[  134.755871][ T5017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'.
[  135.459652][ T5037] netlink: 32 bytes leftover after parsing attributes in process `syz.2.205'.
[  135.479338][ T5037] netlink: 32 bytes leftover after parsing attributes in process `syz.2.205'.
[  135.987325][ T5050] netlink: 'syz.0.211': attribute type 4 has an invalid length.
[  136.011486][ T5050] netlink: 64 bytes leftover after parsing attributes in process `syz.0.211'.
[  136.031906][ T5050] block nbd0: not configured, cannot reconfigure
[  136.487349][ T5065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.630467][   T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  136.839702][   T14] usb 1-1: Using ep0 maxpacket: 16
[  136.850535][   T14] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  136.875703][   T14] usb 1-1: config 0 has no interface number 0
[  136.895755][   T14] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  136.925352][   T14] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  136.946956][   T14] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  136.965472][   T14] usb 1-1: Product: syz
[  136.975182][   T14] usb 1-1: SerialNumber: syz
[  136.989534][   T14] usb 1-1: config 0 descriptor??
[  137.010135][   T14] usbhid 1-1:0.8: couldn't find an input interrupt endpoint
[  137.210539][   T14] usb 1-1: USB disconnect, device number 4
[  137.339979][    C0] Unknown status report in ack skb
[  137.719469][ T5090] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  138.001296][ T5097] netlink: 68 bytes leftover after parsing attributes in process `syz.1.228'.
[  138.969176][ T4256] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  139.179149][ T4256] usb 3-1: Using ep0 maxpacket: 16
[  139.194302][ T4256] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  139.217975][ T4256] usb 3-1: config 0 has no interface number 0
[  139.233953][ T4256] usb 3-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  139.293054][ T4256] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  139.320629][ T4256] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  139.343322][ T4256] usb 3-1: Product: syz
[  139.360532][ T4256] usb 3-1: SerialNumber: syz
[  139.381942][ T4256] usb 3-1: config 0 descriptor??
[  139.414338][ T4256] usbhid 3-1:0.8: couldn't find an input interrupt endpoint
[  139.637432][   T14] usb 3-1: USB disconnect, device number 9
[  139.974154][ T5163] netlink: 68 bytes leftover after parsing attributes in process `syz.3.246'.
[  140.025197][ T4277] Bluetooth: hci4: link tx timeout
[  140.033862][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  140.044185][ T4277] Bluetooth: hci4: link tx timeout
[  140.049427][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  140.155756][ T4277] Bluetooth: hci4: link tx timeout
[  140.161055][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  140.180628][ T4277] Bluetooth: hci4: link tx timeout
[  140.185835][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  140.480937][ T4277] Bluetooth: hci4: link tx timeout
[  140.481937][ T5177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'.
[  140.486157][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  140.749392][ T5192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'.
[  140.928299][ T4277] Bluetooth: hci4: link tx timeout
[  140.933741][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.140255][  T126] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  141.339319][  T126] usb 5-1: Using ep0 maxpacket: 8
[  141.348686][  T126] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  141.367752][  T126] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  141.399231][  T126] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  141.421951][  T126] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  141.524219][  T126] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  141.560735][ T4277] Bluetooth: hci4: link tx timeout
[  141.565962][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.637265][  T126] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  141.703204][  T126] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  141.733969][  T126] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  141.802096][  T126] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  141.816762][ T5215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'.
[  141.860578][  T126] usb 5-1: string descriptor 0 read error: -22
[  141.871581][  T126] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  141.893058][  T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.940140][  T126] adutux 5-1:168.0: interrupt endpoints not found
[  142.129236][ T4277] Bluetooth: hci4: command 0x0406 tx timeout
[  142.280491][ T4277] Bluetooth: hci4: link tx timeout
[  142.285666][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.375093][  T126] usb 5-1: USB disconnect, device number 5
[  143.234296][ T4277] Bluetooth: hci4: link tx timeout
[  143.241279][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.766350][ T4277] Bluetooth: hci4: link tx timeout
[  143.771659][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.975606][ T5271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'.
[  144.125472][ T5277] netlink: 'syz.4.273': attribute type 1 has an invalid length.
[  144.448090][ T5286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  144.910579][ T5296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.278'.
[  145.041656][ T5290] device syzkaller0 entered promiscuous mode
[  146.864654][ T5357] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present
[  147.092965][ T4277] Bluetooth: hci4: link tx timeout
[  147.098169][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  147.679417][ T5356] netlink: 'syz.1.302': attribute type 6 has an invalid length.
[  147.737230][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'.
[  147.766613][ T4277] Bluetooth: hci4: link tx timeout
[  147.772001][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  147.783328][ T4256] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  147.999291][ T4256] usb 4-1: Using ep0 maxpacket: 8
[  148.008080][ T4256] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  148.057618][ T4256] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  148.119220][ T4256] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  148.219195][ T4256] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  148.228351][ T4256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.302138][ T4277] Bluetooth: hci4: link tx timeout
[  148.307431][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.313803][ T4256] usbtmc 4-1:16.0: bulk endpoints not found
[  148.539716][   T14] usb 4-1: USB disconnect, device number 5
[  148.649613][ T5379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.308'.
[  149.194343][ T4277] Bluetooth: hci4: link tx timeout
[  149.199807][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  149.502129][ T5399] net_ratelimit: 10 callbacks suppressed
[  149.502153][ T5399] Dead loop on virtual device ip6_vti0, fix it urgently!
[  150.120967][   T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  150.309062][   T14] usb 1-1: Using ep0 maxpacket: 8
[  150.316052][   T14] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  150.344522][   T14] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  150.379399][   T14] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  150.432721][   T14] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  150.464169][   T14] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  150.485923][   T14] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  150.516127][   T14] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  150.531419][   T14] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  150.543542][   T14] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  150.587641][   T14] usb 1-1: string descriptor 0 read error: -22
[  150.599378][   T14] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  150.617488][   T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.658847][   T14] adutux 1-1:168.0: interrupt endpoints not found
[  150.757295][ T4277] Bluetooth: hci4: link tx timeout
[  150.762666][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  151.071029][  T126] usb 1-1: USB disconnect, device number 5
[  151.517895][ T5459] device syzkaller0 entered promiscuous mode
[  151.766342][ T4277] Bluetooth: hci4: link tx timeout
[  151.771930][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  152.079779][ T5470] device syzkaller0 entered promiscuous mode
[  152.772153][ T4277] Bluetooth: hci4: link tx timeout
[  152.777414][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.469011][ T5511] device syzkaller0 entered promiscuous mode
[  154.988338][ T4277] Bluetooth: hci4: link tx timeout
[  154.994996][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  155.769701][ T4277] Bluetooth: hci4: link tx timeout
[  155.774921][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  156.049695][ T5620] device syzkaller0 entered promiscuous mode
[  156.097326][ T5621] device syzkaller0 entered promiscuous mode
[  156.550357][ T5636] netlink: 56 bytes leftover after parsing attributes in process `syz.1.376'.
[  157.092914][ T5643] netlink: 'syz.1.379': attribute type 1 has an invalid length.
[  157.174113][ T5643] 8021q: adding VLAN 0 to HW filter on device bond1
[  157.268288][ T5645] bond1: (slave geneve2): making interface the new active one
[  157.281161][ T5645] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  157.290375][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  157.462642][ T5645] syz.1.379 (5645) used greatest stack depth: 20744 bytes left
[  157.613848][ T5659] device syzkaller0 entered promiscuous mode
[  157.880582][ T5670] device syzkaller0 entered promiscuous mode
[  158.819597][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.827652][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.394775][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.441445][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.911462][ T5676] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.920534][ T5676] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.929882][ T5676] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.938808][ T5676] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.277531][ T5710] netlink: 'syz.3.393': attribute type 8 has an invalid length.
[  160.295069][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'.
[  160.726291][ T5725] device syzkaller0 entered promiscuous mode
[  164.469655][ T5788] IPVS: set_ctl: invalid protocol: 46 172.30.1.4:21
[  164.645000][ T5784] netlink: 36 bytes leftover after parsing attributes in process `syz.3.422'.
[  165.899435][ T4277] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  168.859173][ T4365] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  169.049098][ T4365] usb 5-1: Using ep0 maxpacket: 8
[  169.062306][ T4365] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  169.098492][ T4365] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  169.125641][ T4365] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  169.157969][ T4365] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  169.177273][ T4365] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  169.193994][ T4365] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  169.258323][ T4365] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  169.274268][ T4365] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  169.302511][ T4365] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  169.352196][ T4365] usb 5-1: string descriptor 0 read error: -22
[  169.358531][ T4365] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  169.401794][ T4365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.992976][ T5850] overlayfs: failed to resolve './file1': -2
[  171.148258][ T4277] Bluetooth: hci4: link tx timeout
[  171.153584][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  171.227969][ T4365] adutux 5-1:168.0: interrupt endpoints not found
[  171.771109][  T126] usb 5-1: USB disconnect, device number 6
[  172.730175][ T5860] netlink: 36 bytes leftover after parsing attributes in process `syz.4.443'.
[  174.782020][ T5888] =======================================================
[  174.782020][ T5888] WARNING: The mand mount option has been deprecated and
[  174.782020][ T5888]          and is ignored by this kernel. Remove the mand
[  174.782020][ T5888]          option from the mount to silence this warning.
[  174.782020][ T5888] =======================================================
[  174.817683][ T5888] ./file0: Can't open blockdev
[  178.305403][ T5930] netlink: 7 bytes leftover after parsing attributes in process `syz.4.460'.
[  178.317413][ T5930] netlink: 40 bytes leftover after parsing attributes in process `syz.4.460'.
[  179.719053][ T4277] Bluetooth: hci3: command 0x59e1 tx timeout
[  180.047404][ T5940] capability: warning: `syz.4.464' uses deprecated v2 capabilities in a way that may be insecure
[  183.284303][ T5970] device syzkaller0 entered promiscuous mode
[  183.990228][ T5982] smc: net device bond0 applied user defined pnetid SYZ0
[  184.999093][  T126] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  186.867671][  T126] usb 2-1: config 0 has an invalid interface number: 84 but max is 0
[  186.906725][  T126] usb 2-1: config 0 has an invalid interface number: 66 but max is 0
[  186.939068][  T126] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  186.978833][  T126] usb 2-1: config 0 has no interface number 0
[  187.003371][  T126] usb 2-1: config 0 has no interface number 1
[  187.017913][  T126] usb 2-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64
[  187.042630][  T126] usb 2-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  187.123460][  T126] usb 2-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30
[  187.175761][  T126] usb 2-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32
[  187.220435][  T126] usb 2-1: config 0 interface 66 altsetting 153 has an invalid endpoint with address 0x12, skipping
[  187.269056][  T126] usb 2-1: config 0 interface 66 altsetting 153 has an invalid endpoint with address 0xE6, skipping
[  187.305856][  T126] usb 2-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216
[  187.366590][  T126] usb 2-1: config 0 interface 66 has no altsetting 0
[  187.399916][  T126] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3
[  187.414815][ T6007] device syzkaller0 entered promiscuous mode
[  187.442133][  T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.474391][  T126] usb 2-1: Product: syz
[  187.478765][  T126] usb 2-1: Manufacturer: syz
[  187.494136][  T126] usb 2-1: SerialNumber: syz
[  187.506691][  T126] usb 2-1: config 0 descriptor??
[  187.606177][  T126] usb 2-1: can't set config #0, error -71
[  187.648405][  T126] usb 2-1: USB disconnect, device number 4
[  191.469032][ T4340] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  191.660700][ T4340] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[  191.695533][ T4340] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  191.736844][ T4340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.766098][ T4340] usb 2-1: config 0 descriptor??
[  191.981793][ T4340] ath6kl: Failed to submit usb control message: -71
[  191.995381][ T4340] ath6kl: unable to send the bmi data to the device: -71
[  192.022694][ T4340] ath6kl: Unable to send get target info: -71
[  192.048495][ T4340] ath6kl: Failed to init ath6kl core: -71
[  192.103147][ T4340] ath6kl_usb: probe of 2-1:0.0 failed with error -71
[  192.151091][ T4340] usb 2-1: USB disconnect, device number 5
[  194.570189][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  194.576744][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  194.903756][ T6072] vivid-003: kernel_thread() failed
[  195.360451][ T6080] netlink: 'syz.4.504': attribute type 4 has an invalid length.
[  195.368197][ T6080] netlink: 17 bytes leftover after parsing attributes in process `syz.4.504'.
[  199.155202][ T6092] input: syz1 as /devices/virtual/input/input12
[  201.078982][    C1] sched: RT throttling activated
[  201.587940][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  201.599344][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'.
[  201.618627][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  201.639245][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  201.647178][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  201.656592][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  201.664856][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  201.798199][ T6120] IPVS: set_ctl: invalid protocol: 94 172.20.20.38:65533
[  202.761573][ T4280] Bluetooth: hci4: link tx timeout
[  202.767045][ T4280] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  202.775423][ T4280] Bluetooth: hci4: link tx timeout
[  202.780848][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  203.720203][ T4280] Bluetooth: hci3: command 0x0409 tx timeout
[  204.839426][ T4277] Bluetooth: hci4: command 0x0406 tx timeout
[  205.392955][ T6117] chnl_net:caif_netlink_parms(): no params data found
[  205.802985][ T4277] Bluetooth: hci3: command 0x041b tx timeout
[  206.759304][ T4280] Bluetooth: hci0: command 0x0406 tx timeout
[  206.760249][ T4267] Bluetooth: hci1: command 0x0406 tx timeout
[  206.760642][ T4277] Bluetooth: hci2: command 0x0406 tx timeout
[  207.163040][ T6117] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.190868][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.205585][ T6117] device bridge_slave_0 entered promiscuous mode
[  207.845174][ T6117] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.873297][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.881176][ T4280] Bluetooth: hci3: command 0x040f tx timeout
[  207.910231][ T6117] device bridge_slave_1 entered promiscuous mode
[  209.835317][ T6117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.995979][ T4280] Bluetooth: hci3: command 0x0419 tx timeout
[  210.564598][ T6117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.908348][ T6117] team0: Port device team_slave_0 added
[  210.948102][ T6117] team0: Port device team_slave_1 added
[  211.098780][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.119232][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.206569][ T6117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.771204][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.779454][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.805374][    C0] vkms_vblank_simulate: vblank timer overrun
[  211.814195][ T6117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.946196][ T6117] device hsr_slave_0 entered promiscuous mode
[  212.015928][ T6117] device hsr_slave_1 entered promiscuous mode
[  212.036410][ T6117] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  212.056649][ T6117] Cannot create hsr debugfs directory
[  212.242100][   T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  212.439667][   T14] usb 2-1: Using ep0 maxpacket: 8
[  212.446653][   T14] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  212.475576][   T14] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  212.522107][   T14] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  212.536153][ T6117] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  212.546099][   T14] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  212.554484][   T14] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  212.566906][   T14] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  212.585936][ T6117] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  212.593345][   T14] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  212.605731][   T14] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  212.620373][   T14] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  212.644490][ T6117] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  212.671035][   T14] usb 2-1: string descriptor 0 read error: -22
[  212.690889][   T14] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  212.719941][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.752047][   T14] adutux 2-1:168.0: interrupt endpoints not found
[  212.782314][ T6117] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  213.870115][   T14] usb 2-1: USB disconnect, device number 6
[  214.307315][ T6117] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.357192][ T5602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  214.369167][  T954] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  214.376420][ T5602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  214.396198][ T6117] 8021q: adding VLAN 0 to HW filter on device team0
[  214.442355][ T5599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  214.456497][ T5599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  214.476471][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.483684][ T5599] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.551247][ T5599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  214.590080][ T5599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  214.615926][ T5599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  214.655167][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.662525][ T5599] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.742885][  T954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.930025][  T954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.946761][  T954] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 8.00
[  214.956109][  T954] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  214.964497][  T954] usb 1-1: Product: syz
[  215.007034][ T5599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  215.361042][  T954] usb 1-1: config 0 descriptor??
[  215.470167][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'.
[  215.529374][ T5599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  215.558471][ T5599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  215.594739][ T5599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  215.623787][ T5599] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  215.682563][ T5602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  215.719909][ T5602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  215.760216][ T5602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  215.785425][  T954] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  215.793478][ T5602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  215.810163][ T5602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  215.855340][  T954] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  215.863101][ T5602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  215.876980][  T954] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  215.904899][  T954] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  215.916596][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  216.050801][  T954] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  216.067496][  T954] cm6533_jd 0003:0D8C:0022.0002: No inputs registered, leaving
[  216.087439][  T954] cm6533_jd 0003:0D8C:0022.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  216.858838][  T954] usb 1-1: USB disconnect, device number 6
[  217.465026][ T6223] fido_id[6223]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  219.849202][ T4340] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  220.089205][ T4340] usb 3-1: Using ep0 maxpacket: 8
[  220.104358][ T4340] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  220.118726][ T4340] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  220.144748][ T4340] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  220.170344][ T4340] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  220.178445][ T4340] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  220.229114][ T4340] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  220.241540][ T4340] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  220.249332][ T4340] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  220.271155][ T4340] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  220.302091][ T4340] usb 3-1: string descriptor 0 read error: -22
[  220.335591][ T4340] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  220.359674][ T4340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.429356][ T4340] adutux 3-1:168.0: interrupt endpoints not found
[  220.564203][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  220.592864][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  220.720835][ T6117] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.814061][ T4340] usb 3-1: USB disconnect, device number 10
[  221.949055][  T126] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  222.159214][  T126] usb 3-1: Using ep0 maxpacket: 16
[  222.168083][  T126] usb 3-1: config 8 has an invalid interface number: 206 but max is 0
[  222.211769][  T126] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  222.384311][  T126] usb 3-1: config 8 has no interface number 0
[  222.398303][  T126] usb 3-1: config 8 interface 206 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  222.411839][  T126] usb 3-1: config 8 interface 206 has no altsetting 0
[  224.500077][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[  224.508230][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[  224.516663][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[  224.525070][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[  224.532955][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[  224.540636][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[  224.610135][  T126] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  224.629099][  T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.639634][  T126] usb 3-1: can't set config #8, error -71
[  224.646272][  T126] usb 3-1: USB disconnect, device number 11
[  224.861154][ T6296] input: syz1 as /devices/virtual/input/input13
[  224.985179][ T6296] random: crng reseeded on system resumption
[  227.801074][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  228.123207][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  228.330274][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  228.353487][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  228.383609][ T6117] device veth0_vlan entered promiscuous mode
[  228.394683][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  228.424905][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  228.485427][ T6117] device veth1_vlan entered promiscuous mode
[  228.571123][  T126] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  228.583581][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  228.607592][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  228.636725][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  228.664485][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  228.707786][ T6117] device veth0_macvtap entered promiscuous mode
[  228.749822][ T6117] device veth1_macvtap entered promiscuous mode
[  228.780400][  T126] usb 1-1: Using ep0 maxpacket: 8
[  228.787907][  T126] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  228.823373][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  228.823946][  T126] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  228.867045][  T126] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  228.892441][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  228.927998][  T126] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  228.942023][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.957574][  T126] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  228.976339][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.011147][  T126] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  229.025401][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.044113][  T126] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  229.051811][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.062001][  T126] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  229.073506][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.084239][  T126] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  229.099993][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.115485][  T126] usb 1-1: string descriptor 0 read error: -22
[  229.123124][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_0
[  229.130671][  T126] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  229.145897][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.159372][  T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.168425][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.275146][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.285857][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.310791][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.329406][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.346071][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_1
[  229.375061][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  229.385513][  T126] adutux 1-1:168.0: interrupt endpoints not found
[  229.393374][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  229.405279][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  229.415460][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  229.439989][ T6117] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.466011][ T6117] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.526115][ T6117] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.560514][ T6117] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.737786][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'.
[  229.758018][ T4364] usb 1-1: USB disconnect, device number 7
[  229.799430][ T4280] Bluetooth: hci3: command 0x0405 tx timeout
[  230.009172][ T5594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.017609][ T5594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.106623][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  230.166836][ T5602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.197323][ T5602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.248637][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  232.307687][    T7] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  232.347129][    T7] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  233.739066][ T4256] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  233.971068][ T4256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  233.993740][ T4256] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  234.030154][ T4256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  234.061074][ T4256] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  234.099447][ T4256] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  234.127784][ T4256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.163009][ T4256] usb 3-1: config 0 descriptor??
[  234.392293][ T4256] hdpvr 3-1:0.0: firmware version 0xfb dated ûZáöźQ‹r$¢ÿñAàá	l¸$°°:-5ƒië¯2ÅÕÎ$ŸÓF@
[  234.425429][ T4256] hdpvr 3-1:0.0: untested firmware, the driver might not work.
[  234.970621][ T6365] netlink: 224 bytes leftover after parsing attributes in process `syz.2.577'.
[  235.618012][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.580'.
[  235.788857][  T954] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  236.439033][  T954] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  236.716013][  T954] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99
[  237.457354][  T954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.509540][  T954] usb 6-1: Product: syz
[  237.520919][ T4256] hdpvr 3-1:0.0: Could not setup controls
[  237.527200][ T4256] hdpvr 3-1:0.0: registering videodev failed
[  237.533673][  T954] usb 6-1: Manufacturer: syz
[  237.563806][  T954] usb 6-1: SerialNumber: syz
[  237.586507][  T954] usb 6-1: config 0 descriptor??
[  237.774522][ T4256] hdpvr: probe of 3-1:0.0 failed with error -71
[  237.792596][ T4256] usb 3-1: USB disconnect, device number 12
[  237.963317][  T954] f81534a_ctrl 6-1:0.0: failed to set register 0x116: -5
[  238.810273][  T954] f81534a_ctrl 6-1:0.0: failed to enable ports: -5
[  238.816898][  T954] f81534a_ctrl: probe of 6-1:0.0 failed with error -5
[  238.827098][  T954] usb 6-1: USB disconnect, device number 2
[  240.199268][    T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  240.419362][    T7] usb 1-1: Using ep0 maxpacket: 8
[  240.445915][    T7] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  240.580601][    T7] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  240.757686][    T7] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  241.543491][    T7] usb 1-1: unable to read config index 1 descriptor/start: -71
[  241.572518][    T7] usb 1-1: can't read configurations, error -71
[  242.506509][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'.
[  242.929080][    T7] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  243.131252][    T7] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  243.161780][    T7] usb 1-1: config 0 has no interface number 0
[  243.219955][    T7] usb 1-1: config 0 interface 41 has no altsetting 0
[  243.251263][    T7] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  243.335153][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.354616][ T6427] xt_hashlimit: max too large, truncated to 1048576
[  243.394780][    T7] usb 1-1: Product: syz
[  243.419041][    T7] usb 1-1: Manufacturer: syz
[  243.423731][    T7] usb 1-1: SerialNumber: syz
[  243.474590][    T7] usb 1-1: config 0 descriptor??
[  243.869661][ T6437] ip6t_srh: unknown srh invflags 7F00
[  244.513609][    T7] CoreChips: probe of 1-1:0.41 failed with error -71
[  244.581481][    T7] usb 1-1: USB disconnect, device number 9
[  246.059031][    T7] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  246.263830][    T7] usb 1-1: Using ep0 maxpacket: 8
[  246.275373][    T7] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  246.309508][    T7] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  246.351809][    T7] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  246.425538][    T7] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  246.465177][    T7] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  246.517940][    T7] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  246.574740][    T7] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  246.609294][    T7] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  246.651857][    T7] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  246.707471][    T7] usb 1-1: string descriptor 0 read error: -22
[  246.734513][    T7] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  246.774363][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.836766][    T7] adutux 1-1:168.0: interrupt endpoints not found
[  247.044509][    T7] usb 1-1: USB disconnect, device number 10
[  248.904422][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'.
[  248.917540][ T6472] sctp: [Deprecated]: syz.1.606 (pid 6472) Use of int in maxseg socket option.
[  248.917540][ T6472] Use struct sctp_assoc_value instead
[  252.500979][ T6482] Process accounting resumed
[  253.199066][  T954] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  253.399107][  T954] usb 1-1: Using ep0 maxpacket: 8
[  253.415189][  T954] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  253.748318][  T954] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  253.839029][  T954] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  253.920502][  T954] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  253.949945][  T954] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  254.015376][  T954] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  254.072157][  T954] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  254.112124][  T954] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  254.139210][  T954] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  254.174028][  T954] usb 1-1: string descriptor 0 read error: -22
[  254.202200][  T954] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  254.239250][  T954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.272476][  T954] adutux 1-1:168.0: interrupt endpoints not found
[  254.466450][  T954] usb 1-1: USB disconnect, device number 11
[  254.678802][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'.
[  254.912190][ T6511] IPVS: set_ctl: invalid protocol: 94 172.20.20.38:65533
[  255.883432][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  255.890026][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  261.230930][ T6535] capability: warning: `syz.5.624' uses 32-bit capabilities (legacy support in use)
[  263.139308][ T5700] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  263.353290][ T5700] usb 3-1: Using ep0 maxpacket: 8
[  263.362424][ T5700] usb 3-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64
[  264.386152][ T5700] usb 3-1: config 1 interface 0 has no altsetting 0
[  264.420974][ T5700] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  264.430253][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.439363][ T5700] usb 3-1: Product: syz
[  264.444111][ T5700] usb 3-1: Manufacturer: syz
[  264.448756][ T5700] usb 3-1: SerialNumber: syz
[  264.471175][ T6551] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  266.350167][ T4280] Bluetooth: hci4: link tx timeout
[  266.355399][ T4280] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  266.363543][ T4280] Bluetooth: hci4: link tx timeout
[  266.368721][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  266.981731][ T5700] usb 3-1: USB disconnect, device number 13
[  267.400950][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'.
[  268.260927][ T6597] IPVS: set_ctl: invalid protocol: 94 172.20.20.38:65533
[  270.389018][ T4310] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  270.613478][ T4310] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  270.856884][ T4310] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  271.100474][ T4310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  271.208103][ T4310] usb 3-1: Product: syz
[  271.254435][ T4310] usb 3-1: Manufacturer: syz
[  271.310386][ T4310] usb 3-1: SerialNumber: syz
[  271.636523][ T4310] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  273.331160][ T6620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.646'.
[  273.351614][ T4365] usb 3-1: USB disconnect, device number 14
[  273.389859][ T4365] usblp0: removed
[  276.744832][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'.
[  277.719401][ T6642] IPVS: set_ctl: invalid protocol: 94 172.20.20.38:65533
[  279.653407][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.655'.
[  283.483070][ T4339] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  283.816289][ T4339] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  283.900385][ T4339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  283.911562][ T4339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  283.921433][ T4339] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  283.956374][ T4339] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  283.979075][ T4339] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  283.999062][ T4339] usb 3-1: Manufacturer: syz
[  284.017813][ T4339] usb 3-1: config 0 descriptor??
[  284.229730][ T6675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.268688][ T6675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.039268][ T4339] rc_core: IR keymap rc-hauppauge not found
[  285.049618][ T4339] Registered IR keymap rc-empty
[  285.067339][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  285.129082][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  285.169651][ T4339] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  285.235215][ T4339] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14
[  285.313977][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  285.369086][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  285.549250][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  285.593704][ T6695] affs: No valid root block on device nullb0
[  285.989135][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  286.039387][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  286.069521][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  286.109201][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  286.199586][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  286.229131][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  286.280549][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  286.440665][ T4339] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  286.494752][ T4339] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  286.548827][ T4339] usb 3-1: USB disconnect, device number 15
[  286.847096][ T6707] x_tables: ip_tables: osf match: only valid for protocol 6
[  289.594576][ T5586] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.875428][ T5586] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.019140][ T4365] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  290.033285][ T5586] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.294473][ T4365] usb 3-1: Using ep0 maxpacket: 16
[  290.302680][ T4365] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  291.092360][ T4365] usb 3-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config
[  291.102935][ T4365] usb 3-1: config 0 has no interface number 0
[  291.109133][ T4365] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  291.132750][ T4365] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  291.144090][ T5586] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.409166][ T4365] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  291.456120][ T4365] usb 3-1: Product: syz
[  291.532256][ T4365] usb 3-1: SerialNumber: syz
[  291.583761][ T4365] usb 3-1: config 0 descriptor??
[  291.652334][ T4365] usbhid 3-1:0.8: couldn't find an input interrupt endpoint
[  291.837055][  T954] usb 3-1: USB disconnect, device number 16
[  295.450215][ T6765] device syzkaller0 entered promiscuous mode
[  296.321608][   T22] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  296.519044][   T22] usb 3-1: Using ep0 maxpacket: 16
[  296.527798][   T22] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  296.631147][   T22] usb 3-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config
[  296.732933][   T22] usb 3-1: config 0 has no interface number 0
[  296.782395][   T22] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  296.900373][   T22] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  296.939079][   T22] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  296.967614][   T22] usb 3-1: Product: syz
[  296.989238][   T22] usb 3-1: SerialNumber: syz
[  297.021077][   T22] usb 3-1: config 0 descriptor??
[  297.061354][   T22] usbhid 3-1:0.8: couldn't find an input interrupt endpoint
[  297.257784][   T22] usb 3-1: USB disconnect, device number 17
[  297.589206][ T5586] device hsr_slave_0 left promiscuous mode
[  297.643480][ T5586] device hsr_slave_1 left promiscuous mode
[  297.702178][ T5586] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  297.732817][ T5586] batman_adv: batadv0: Removing interface: batadv_slave_0
[  297.790687][ T5586] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  297.816861][ T5586] batman_adv: batadv0: Removing interface: batadv_slave_1
[  297.848007][ T5586] device bridge_slave_1 left promiscuous mode
[  297.887210][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.102646][ T5586] device bridge_slave_0 left promiscuous mode
[  298.109020][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.369357][ T4339] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  298.464993][ T6819] syz.1.701 (6819): /proc/6812/oom_adj is deprecated, please use /proc/6812/oom_score_adj instead.
[  298.669219][ T4325] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  299.140428][ T4339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  299.198131][ T4339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.224767][ T4339] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  299.243638][ T4339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.258364][ T5586] device veth1_macvtap left promiscuous mode
[  299.267150][ T4325] usb 6-1: Using ep0 maxpacket: 8
[  299.281723][ T4325] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13
[  299.301371][ T4339] usb 3-1: config 0 descriptor??
[  299.310776][ T5586] device veth0_macvtap left promiscuous mode
[  299.321318][ T4339] hub 3-1:0.0: USB hub found
[  299.333630][ T4325] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  299.349394][ T5586] device veth1_vlan left promiscuous mode
[  299.400058][ T5586] device veth0_vlan left promiscuous mode
[  299.434507][ T4325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.513084][ T4325] usb 6-1: Product: syz
[  299.522090][ T4339] hub 3-1:0.0: 2 ports detected
[  299.540288][ T4325] usb 6-1: Manufacturer: syz
[  299.552766][ T4325] usb 6-1: SerialNumber: syz
[  299.591568][ T4325] usb 6-1: config 0 descriptor??
[  299.631260][ T4325] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  300.233130][ T6840] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  300.285066][ T6840] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  300.589362][ T5700] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  300.784606][ T5700] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  300.813371][ T5700] usb 5-1: config 0 has no interface number 0
[  300.827364][ T4325] gspca_zc3xx: reg_w_i err -71
[  300.839054][ T5700] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  300.872153][ T5700] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64
[  300.873702][ T4339] hub 3-1:0.0: hub_ext_port_status failed (err = -32)
[  300.895863][ T5700] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  300.906249][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.923030][ T5700] usb 5-1: config 0 descriptor??
[  300.936689][ T6841] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  300.974726][ T5700] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  301.166282][ T5700] usb 5-1: USB disconnect, device number 7
[  301.166334][    C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  301.406019][ T6840] fuse: Unknown parameter '00000000000000000000'
[  301.485963][ T4325] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  301.497375][ T4325] gspca_zc3xx: probe of 6-1:0.0 failed with error -71
[  301.548557][ T4325] usb 6-1: USB disconnect, device number 3
[  302.665630][ T5586] team0 (unregistering): Port device team_slave_1 removed
[  302.761357][ T5586] team0 (unregistering): Port device team_slave_0 removed
[  302.805140][ T5586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  302.869076][ T4339] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  302.878523][ T5586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  303.079195][ T4339] usb 2-1: Using ep0 maxpacket: 16
[  303.086919][ T4339] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  303.101989][ T4339] usb 2-1: config 0 has no interface number 0
[  303.108345][ T4339] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  303.123940][ T4339] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  303.133602][ T4339] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  303.142663][ T4339] usb 2-1: Product: syz
[  303.147053][ T4339] usb 2-1: SerialNumber: syz
[  303.156869][ T4339] usb 2-1: config 0 descriptor??
[  303.166043][ T4339] usbhid 2-1:0.8: couldn't find an input interrupt endpoint
[  303.370590][ T4339] usb 2-1: USB disconnect, device number 7
[  303.513524][ T5586] bond0 (unregistering): Released all slaves
[  303.789366][   T22] usb 3-1: USB disconnect, device number 18
[  305.559418][  T954] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  305.814290][  T954] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  305.862601][  T954] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  305.981348][  T954] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  306.101980][  T954] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  306.295157][  T954] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  306.377903][  T954] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  306.436229][  T954] usb 6-1: Product: syz
[  306.464006][  T954] usb 6-1: Manufacturer: syz
[  306.627749][  T954] cdc_wdm 6-1:1.0: skipping garbage
[  306.671460][  T954] cdc_wdm 6-1:1.0: skipping garbage
[  306.987564][  T954] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  307.058998][  T954] cdc_wdm 6-1:1.0: Unknown control protocol
[  307.089259][ T5700] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  307.089349][ T4365] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  307.224645][  T954] usb 6-1: USB disconnect, device number 4
[  307.281522][ T4365] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  307.311824][ T4365] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  307.419175][ T5700] usb 2-1: Using ep0 maxpacket: 32
[  307.434094][ T5700] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  307.585774][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.614597][ T4365] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  307.690023][ T5700] usb 2-1: config 0 descriptor??
[  307.716226][ T5700] gspca_main: sq930x-2.14.0 probing 041e:403c
[  307.726879][ T4365] usb 5-1: config 0 interface 0 has no altsetting 0
[  307.774176][ T4365] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  307.804097][ T4365] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  307.829048][ T4365] usb 5-1: config 0 interface 0 has no altsetting 0
[  308.069510][ T4365] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  308.084447][ T4365] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  308.119013][ T4365] usb 5-1: config 0 interface 0 has no altsetting 0
[  308.929392][ T5700] gspca_sq930x: reg_r 001f failed -110
[  308.935030][ T5700] sq930x: probe of 2-1:0.0 failed with error -110
[  309.113888][ T4365] usb 5-1: unable to read config index 3 descriptor/start: -71
[  309.139051][ T4365] usb 5-1: can't read configurations, error -71
[  310.402006][  T126] usb 2-1: USB disconnect, device number 8
[  311.119068][ T4365] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  311.319086][ T4365] usb 5-1: Using ep0 maxpacket: 16
[  311.336039][ T4365] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  311.348487][ T4365] usb 5-1: config 0 has no interface number 0
[  311.358187][ T4365] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  311.377541][ T4365] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  311.403903][ T4365] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  311.428139][ T4365] usb 5-1: Product: syz
[  311.439220][ T4365] usb 5-1: SerialNumber: syz
[  311.451801][ T4365] usb 5-1: config 0 descriptor??
[  311.504014][ T4365] usbhid 5-1:0.8: couldn't find an input interrupt endpoint
[  311.664815][ T4339] usb 5-1: USB disconnect, device number 10
[  311.892533][ T6952] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  313.375863][ T6973] fuse: Bad value for 'fd'
[  317.321566][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  317.328058][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  318.015844][ T7014] sctp: [Deprecated]: syz.4.747 (pid 7014) Use of int in maxseg socket option.
[  318.015844][ T7014] Use struct sctp_assoc_value instead
[  318.086502][  T126] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  318.339229][  T126] usb 3-1: Using ep0 maxpacket: 16
[  318.346466][  T126] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  318.399483][  T126] usb 3-1: config 0 has no interface number 0
[  318.405672][  T126] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  318.468335][  T126] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  318.499763][  T126] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  318.654814][  T126] usb 3-1: Product: syz
[  318.659862][  T126] usb 3-1: SerialNumber: syz
[  318.684058][  T126] usb 3-1: config 0 descriptor??
[  318.710935][  T126] usbhid 3-1:0.8: couldn't find an input interrupt endpoint
[  319.080079][  T126] usb 3-1: USB disconnect, device number 19
[  319.882425][ T7043] device syzkaller0 entered promiscuous mode
[  319.983934][ T7043] tipc: Started in network mode
[  319.997635][ T7043] tipc: Node identity 768522f75dab, cluster identity 4711
[  320.014973][ T7043] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.038357][ T7042] tipc: Resetting bearer <eth:syzkaller0>
[  321.065003][ T7042] tipc: Disabling bearer <eth:syzkaller0>
[  321.111207][ T4339] tipc: Node number set to 724443895
[  321.762416][ T7067] IPVS: sh: FWM 3 0x00000003 - no destination available
[  321.800398][ T7067] IPVS: sh: FWM 3 0x00000003 - no destination available
[  321.966291][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.759'.
[  322.091846][ T7067] device syzkaller1 entered promiscuous mode
[  324.519030][ T4280] Bluetooth: hci3: command 0x0406 tx timeout
[  325.243403][ T7079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.763'.
[  326.379015][ T4339] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  326.579146][ T4339] usb 6-1: Using ep0 maxpacket: 16
[  326.591328][ T4339] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  326.626660][ T4339] usb 6-1: config 0 has no interface number 0
[  326.658830][ T4339] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  326.815995][ T4339] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  326.866112][ T4339] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  326.926195][ T4339] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  326.974627][ T4339] usb 6-1: Product: syz
[  327.002122][ T4339] usb 6-1: SerialNumber: syz
[  327.022031][ T4339] usb 6-1: config 0 descriptor??
[  327.047430][ T4339] cm109 6-1:0.8: invalid payload size 0, expected 4
[  327.083571][ T4339] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input15
[  327.279448][    C0] cm109_urb_ctl_callback: 283 callbacks suppressed
[  327.279466][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  327.295603][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  327.307028][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  327.315839][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  327.323068][ T4339] usb 6-1: USB disconnect, device number 5
[  327.332722][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  327.339776][    C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  327.350696][ T4339] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  329.089169][ T7122] vivid-001: disconnect
[  329.245596][ T7117] vivid-001: reconnect
[  331.922609][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.777'.
[  334.333511][ T4267] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  334.343775][ T4267] CPU: 1 PID: 4267 Comm: kworker/u5:1 Not tainted syzkaller #0
[  334.351389][ T4267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  334.361496][ T4267] Workqueue: hci4 hci_rx_work
[  334.366249][ T4267] Call Trace:
[  334.369557][ T4267]  <TASK>
[  334.372531][ T4267]  dump_stack_lvl+0x168/0x22e
[  334.377264][ T4267]  ? show_regs_print_info+0x12/0x12
[  334.382552][ T4267]  ? load_image+0x3b0/0x3b0
[  334.387109][ T4267]  sysfs_create_dir_ns+0x252/0x280
[  334.392269][ T4267]  ? hci_rx_work+0x3eb/0xd40
[  334.396900][ T4267]  ? sysfs_warn_dup+0xa0/0xa0
[  334.401617][ T4267]  ? do_raw_spin_unlock+0x11d/0x230
[  334.406863][ T4267]  kobject_add_internal+0x6b8/0xc80
[  334.412108][ T4267]  kobject_add+0x152/0x210
[  334.416569][ T4267]  ? kobject_init+0x1d0/0x1d0
[  334.421335][ T4267]  ? klist_children_get+0x50/0x50
[  334.426406][ T4267]  ? get_device_parent+0x121/0x3f0
[  334.431583][ T4267]  device_add+0x483/0xfb0
[  334.435963][ T4267]  ? kmem_cache_free+0xf7/0x290
[  334.440866][ T4267]  hci_conn_add_sysfs+0xd1/0x1e0
[  334.445857][ T4267]  le_conn_complete_evt+0xfec/0x15d0
[  334.451196][ T4267]  ? hci_le_big_info_adv_report_evt+0x310/0x310
[  334.457539][ T4267]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  334.463220][ T4267]  ? skb_pull_data+0xf7/0x200
[  334.467951][ T4267]  hci_le_conn_complete_evt+0x183/0x440
[  334.473575][ T4267]  ? hci_remote_host_features_evt+0x270/0x270
[  334.479693][ T4267]  hci_event_packet+0x791/0x1210
[  334.484689][ T4267]  ? bis_list+0x280/0x280
[  334.489060][ T4267]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  334.494998][ T4267]  ? kcov_remote_start+0x4c7/0x7e0
[  334.500152][ T4267]  ? pci_fixup_i450nx+0x2d0/0x2e0
[  334.505227][ T4267]  ? hci_send_to_monitor+0x9c/0x4a0
[  334.510469][ T4267]  hci_rx_work+0x3eb/0xd40
[  334.515012][ T4267]  ? _raw_spin_unlock+0x40/0x40
[  334.519901][ T4267]  ? process_one_work+0x7a1/0x1160
[  334.525045][ T4267]  process_one_work+0x898/0x1160
[  334.530029][ T4267]  ? worker_detach_from_pool+0x240/0x240
[  334.535707][ T4267]  ? _raw_spin_lock_irq+0xab/0xe0
[  334.540768][ T4267]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  334.546175][ T4267]  ? kthread_data+0x4b/0xc0
[  334.550726][ T4267]  worker_thread+0xaa2/0x1250
[  334.555466][ T4267]  kthread+0x29d/0x330
[  334.559575][ T4267]  ? worker_clr_flags+0x1a0/0x1a0
[  334.564629][ T4267]  ? kthread_blkcg+0xd0/0xd0
[  334.569263][ T4267]  ret_from_fork+0x1f/0x30
[  334.573728][ T4267]  </TASK>
[  334.580437][ T4267] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  334.594005][ T4267] Bluetooth: hci4: failed to register connection device
[  337.009020][  T126] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  337.208981][  T126] usb 1-1: Using ep0 maxpacket: 16
[  337.216130][  T126] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  337.391931][  T126] usb 1-1: config 0 has no interface number 0
[  338.186439][  T126] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  338.235899][  T126] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  338.364074][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  338.374190][ T4280] CPU: 1 PID: 4280 Comm: kworker/u5:6 Not tainted syzkaller #0
[  338.381807][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  338.391916][ T4280] Workqueue: hci4 hci_rx_work
[  338.396695][ T4280] Call Trace:
[  338.400020][ T4280]  <TASK>
[  338.403014][ T4280]  dump_stack_lvl+0x168/0x22e
[  338.407831][ T4280]  ? show_regs_print_info+0x12/0x12
[  338.413099][ T4280]  ? load_image+0x3b0/0x3b0
[  338.417672][ T4280]  sysfs_create_dir_ns+0x252/0x280
[  338.422848][ T4280]  ? hci_rx_work+0x3eb/0xd40
[  338.427506][ T4280]  ? sysfs_warn_dup+0xa0/0xa0
[  338.432255][ T4280]  ? do_raw_spin_unlock+0x11d/0x230
[  338.437525][ T4280]  kobject_add_internal+0x6b8/0xc80
[  338.442809][ T4280]  kobject_add+0x152/0x210
[  338.447295][ T4280]  ? kobject_init+0x1d0/0x1d0
[  338.452053][ T4280]  ? klist_children_get+0x50/0x50
[  338.457152][ T4280]  ? get_device_parent+0x121/0x3f0
[  338.462473][ T4280]  device_add+0x483/0xfb0
[  338.466883][ T4280]  ? kmem_cache_free+0xf7/0x290
[  338.471817][ T4280]  hci_conn_add_sysfs+0xd1/0x1e0
[  338.476846][ T4280]  le_conn_complete_evt+0xfec/0x15d0
[  338.482289][ T4280]  ? hci_le_big_info_adv_report_evt+0x310/0x310
[  338.488606][ T4280]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  338.494308][ T4280]  ? skb_pull_data+0xf7/0x200
[  338.499040][ T4280]  hci_le_enh_conn_complete_evt+0x185/0x460
[  338.505019][ T4280]  ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0
[  338.511519][ T4280]  ? hci_remote_host_features_evt+0x270/0x270
[  338.517742][ T4280]  hci_event_packet+0x791/0x1210
[  338.522851][ T4280]  ? bis_list+0x280/0x280
[  338.527257][ T4280]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  338.533212][ T4280]  ? kcov_remote_start+0x4c7/0x7e0
[  338.538398][ T4280]  ? pci_fixup_i450nx+0x2d0/0x2e0
[  338.543498][ T4280]  ? hci_send_to_monitor+0x9c/0x4a0
[  338.548778][ T4280]  hci_rx_work+0x3eb/0xd40
[  338.553262][ T4280]  ? _raw_spin_unlock+0x40/0x40
[  338.558176][ T4280]  ? process_one_work+0x7a1/0x1160
[  338.563357][ T4280]  process_one_work+0x898/0x1160
[  338.568645][ T4280]  ? worker_detach_from_pool+0x240/0x240
[  338.576964][ T4280]  ? _raw_spin_lock_irq+0xab/0xe0
[  338.582054][ T4280]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  338.587575][ T4280]  ? kthread_data+0x4b/0xc0
[  338.592184][ T4280]  worker_thread+0xaa2/0x1250
[  338.596918][ T4280]  ? __kthread_parkme+0x162/0x1c0
[  338.601999][ T4280]  kthread+0x29d/0x330
[  338.606111][ T4280]  ? worker_clr_flags+0x1a0/0x1a0
[  338.611189][ T4280]  ? kthread_blkcg+0xd0/0xd0
[  338.615840][ T4280]  ret_from_fork+0x1f/0x30
[  338.620315][ T4280]  </TASK>
[  338.629392][ T4280] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  338.649009][ T4280] Bluetooth: hci4: failed to register connection device
[  338.686204][  T126] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  338.702746][  T126] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  338.789452][ T7189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.787'.
[  338.843701][  T126] usb 1-1: Product: syz
[  338.998260][  T126] usb 1-1: SerialNumber: syz
[  339.186802][  T126] usb 1-1: config 0 descriptor??
[  339.305342][  T126] usb 1-1: can't set config #0, error -71
[  339.329758][  T126] usb 1-1: USB disconnect, device number 12
[  339.574993][    T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  339.629257][ T4280] Bluetooth: hci4: link tx timeout
[  339.634503][ T4280] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  339.644511][ T4280] Bluetooth: hci4: link tx timeout
[  339.649775][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  339.779057][    T7] usb 6-1: Using ep0 maxpacket: 8
[  339.790409][    T7] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  339.813244][    T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  339.824783][    T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  339.835170][ T4318] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  339.847316][    T7] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  339.873475][    T7] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  339.889023][    T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.054560][  T126] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  340.064549][ T4318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  340.082352][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  340.098110][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  340.115761][ T4318] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  340.129233][    T7] usb 6-1: GET_CAPABILITIES returned 0
[  340.134804][    T7] usbtmc 6-1:16.0: can't read capabilities
[  340.175203][ T4318] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  340.185972][ T4318] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  340.189243][ T4310] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  340.205242][ T4318] usb 3-1: Manufacturer: syz
[  340.219795][ T4318] usb 3-1: config 0 descriptor??
[  340.261508][  T126] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  340.270713][  T126] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  340.281423][  T126] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  340.290900][  T126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.304299][  T126] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  340.314378][  T126] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  340.322825][  T126] usb 5-1: Product: syz
[  340.327287][  T126] usb 5-1: Manufacturer: syz
[  340.355669][    T7] usb 6-1: USB disconnect, device number 6
[  340.381751][  T126] cdc_wdm 5-1:1.0: skipping garbage
[  340.400987][ T4310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.412796][  T126] cdc_wdm 5-1:1.0: skipping garbage
[  340.423560][  T126] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  340.430106][ T4310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  340.441983][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.455465][  T126] cdc_wdm 5-1:1.0: Unknown control protocol
[  340.462073][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.476663][ T4310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  340.514368][ T4310] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  340.544668][ T4310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.569876][ T4310] usb 2-1: config 0 descriptor??
[  340.579234][  T126] usb 5-1: USB disconnect, device number 11
[  340.719210][ T4318] rc_core: IR keymap rc-hauppauge not found
[  340.731323][ T4318] Registered IR keymap rc-empty
[  340.736346][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  340.759094][ T4280] Bluetooth: hci4: command 0x0406 tx timeout
[  340.799203][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  340.843330][ T4318] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  340.867190][ T4318] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16
[  341.054018][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  341.075697][    C0] mceusb 3-1:0.0: long-range (0x80) receiver active
[  341.086640][ T4310] hid-generic 0003:1044:7A4D.0004: item fetching failed at offset 0/1
[  341.096046][ T4310] hid-generic: probe of 0003:1044:7A4D.0004 failed with error -22
[  341.100335][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  341.838413][  T126] usb 2-1: USB disconnect, device number 9
[  341.844575][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  341.879698][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  341.924606][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  341.959175][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  341.999061][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  342.039227][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  342.169085][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  342.186039][   T26] audit: type=1326 audit(1767166082.683:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.0.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722b8f749 code=0x7ffc0000
[  342.209032][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  343.807119][ T4318] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  343.855858][ T4318] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x80 active)
[  343.877073][   T26] audit: type=1326 audit(1767166084.263:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.0.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f5722b8f749 code=0x7ffc0000
[  343.933687][ T4318] usb 3-1: USB disconnect, device number 20
[  343.958683][ T7240] binder: BINDER_SET_CONTEXT_MGR already set
[  344.007975][ T7240] binder: 7239:7240 ioctl 4018620d 200000000100 returned -16
[  344.050481][   T26] audit: type=1326 audit(1767166084.263:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.0.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722b8f749 code=0x7ffc0000
[  344.175588][   T26] audit: type=1326 audit(1767166084.263:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.0.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5722b8f749 code=0x7ffc0000
[  344.269081][   T26] audit: type=1326 audit(1767166084.263:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.0.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722b8f749 code=0x7ffc0000
[  344.349054][ T4310] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  344.369273][   T26] audit: type=1326 audit(1767166084.263:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.0.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5722b8f749 code=0x7ffc0000
[  344.468523][   T26] audit: type=1326 audit(1767166084.263:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.0.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722b8f749 code=0x7ffc0000
[  344.542468][ T4310] usb 5-1: Using ep0 maxpacket: 16
[  344.551801][ T4310] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  344.581144][ T4310] usb 5-1: config 0 has no interface number 0
[  344.587342][ T4310] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  344.618805][ T4310] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  344.647042][ T4310] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  344.671393][ T4310] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  344.691549][   T26] audit: type=1326 audit(1767166084.293:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.0.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5722b8f749 code=0x7ffc0000
[  344.705494][ T4310] usb 5-1: Product: syz
[  344.731143][ T4310] usb 5-1: SerialNumber: syz
[  344.757424][ T4310] usb 5-1: config 0 descriptor??
[  344.825871][ T4310] cm109 5-1:0.8: invalid payload size 0, expected 4
[  344.837966][ T4310] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input17
[  344.891587][   T26] audit: type=1326 audit(1767166084.293:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.0.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722b8f749 code=0x7ffc0000
[  345.001146][   T26] audit: type=1326 audit(1767166084.303:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.0.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5722b8f749 code=0x7ffc0000
[  345.033345][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  345.041634][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  345.050159][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  345.057640][ T4310] usb 5-1: USB disconnect, device number 12
[  345.070769][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  345.077804][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  345.091087][ T4310] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  348.203621][ T7299] usb usb5: usbfs: process 7299 (syz.0.814) did not claim interface 0 before use
[  348.281555][ T4280] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  348.290914][ T4280] Bluetooth: hci1: Injecting HCI hardware error event
[  348.300284][ T4280] Bluetooth: hci1: hardware error 0x00
[  348.418164][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'.
[  348.449127][ T4339] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  348.518742][    T7] libceph: connect (1)[c::]:6789 error -101
[  348.536044][    T7] libceph: mon0 (1)[c::]:6789 connect error
[  348.561029][ T4340] libceph: connect (1)[c::]:6789 error -101
[  348.567124][ T4340] libceph: mon0 (1)[c::]:6789 connect error
[  348.739048][ T4339] usb 3-1: Using ep0 maxpacket: 16
[  348.752061][ T4339] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  348.908549][ T4340] libceph: connect (1)[c::]:6789 error -101
[  348.913716][    T7] libceph: connect (1)[c::]:6789 error -101
[  348.915559][  T954] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  348.921704][ T4339] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  348.937481][    T7] libceph: mon0 (1)[c::]:6789 connect error
[  348.955986][ T4340] libceph: mon0 (1)[c::]:6789 connect error
[  349.065486][ T4339] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  349.763250][ T7305] ceph: No mds server is up or the cluster is laggy
[  349.803042][ T4340] libceph: connect (1)[c::]:6789 error -101
[  349.820471][ T4340] libceph: mon0 (1)[c::]:6789 connect error
[  349.826869][ T7312] ceph: No mds server is up or the cluster is laggy
[  349.839587][ T4339] usb 3-1: Manufacturer: syz
[  349.889029][  T954] usb 5-1: Using ep0 maxpacket: 16
[  349.890754][ T4339] usb 3-1: config 0 descriptor??
[  349.899039][  T954] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  349.907233][  T954] usb 5-1: config 0 has no interface number 0
[  349.960945][  T954] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  350.016650][  T954] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  350.039849][  T954] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  350.095511][  T954] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  350.135505][  T954] usb 5-1: Product: syz
[  350.153069][  T954] usb 5-1: SerialNumber: syz
[  350.211279][  T954] usb 5-1: config 0 descriptor??
[  350.234966][  T954] cm109 5-1:0.8: invalid payload size 0, expected 4
[  350.244004][  T954] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input19
[  350.359026][ T4280] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  350.419035][ T4340] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  350.437778][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  350.445003][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  350.452481][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  350.462464][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  350.474865][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  350.539237][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  350.547489][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  350.572582][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  350.583205][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  350.636350][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  350.730087][  T126] usb 5-1: USB disconnect, device number 13
[  350.730345][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  350.988286][ T4340] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  350.998918][ T4340] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  351.011261][ T4340] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  351.021504][ T4340] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  351.039244][ T4340] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  351.049580][ T4340] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  351.073764][ T4340] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  351.083148][ T4340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  351.091761][ T4340] usb 2-1: Product: syz
[  351.098286][ T4340] usb 2-1: Manufacturer: syz
[  351.103596][ T4340] usb 2-1: SerialNumber: syz
[  351.111839][ T4340] usb 2-1: config 0 descriptor??
[  351.152344][  T126] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  351.517259][  T126] usb 3-1: USB disconnect, device number 21
[  353.069077][  T126] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  353.136764][ T5700] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  353.209531][ T5700] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  353.259188][  T126] usb 3-1: Using ep0 maxpacket: 32
[  353.268270][  T126] usb 3-1: config 0 interface 0 has no altsetting 0
[  353.312327][  T126] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  353.371814][  T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.413612][  T126] usb 3-1: Product: syz
[  353.477838][  T126] usb 3-1: Manufacturer: syz
[  353.519169][  T126] usb 3-1: SerialNumber: syz
[  353.570334][  T126] usb 3-1: config 0 descriptor??
[  353.623056][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.829'.
[  354.101452][ T5700] usb 2-1: USB disconnect, device number 10
[  354.109326][  T126] gs_usb 3-1:0.0: Configuring for 1 interfaces
[  354.309882][  T126] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO)
[  354.349521][  T126] gs_usb: probe of 3-1:0.0 failed with error -71
[  354.409277][  T126] usb 3-1: USB disconnect, device number 22
[  358.276362][    T7] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  358.899049][    T7] usb 6-1: Using ep0 maxpacket: 8
[  358.905918][    T7] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  358.915478][    T7] usb 6-1: config 179 has no interface number 0
[  358.947168][    T7] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  359.026131][    T7] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  359.587283][    T7] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  359.626972][    T7] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  359.679063][    T7] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  359.775450][    T7] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  359.852130][    T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.963013][ T7413] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  360.379324][    T7] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input20
[  360.402496][ T5700] usb 6-1: USB disconnect, device number 7
[  360.402543][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  360.416846][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  360.618978][ T7436] device ip6tnl1 entered promiscuous mode
[  360.670822][ T5700] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  360.892490][ T7432] ceph: No mds server is up or the cluster is laggy
[  361.646858][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.5.847'.
[  366.242732][ T7472] mkiss: ax0: crc mode is auto.
[  370.699152][ T4325] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  370.919009][ T4325] usb 1-1: Using ep0 maxpacket: 32
[  370.926175][ T4325] usb 1-1: config 0 has an invalid interface number: 133 but max is 0
[  370.984462][ T4325] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  371.051366][ T4325] usb 1-1: config 0 has no interface number 0
[  371.102099][ T4325] usb 1-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  371.170030][ T4325] usb 1-1: config 0 interface 133 altsetting 0 has an invalid endpoint with address 0xF8, skipping
[  371.218297][ T4325] usb 1-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  371.282754][ T4325] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e
[  371.318992][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.331368][ T4325] usb 1-1: Product: syz
[  371.335624][ T4325] usb 1-1: Manufacturer: syz
[  371.358009][ T4325] usb 1-1: SerialNumber: syz
[  371.413977][ T4325] usb 1-1: config 0 descriptor??
[  371.442970][ T7497] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  373.181575][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.866'.
[  373.197765][ T4325] usb 1-1: probing VID:PID(0424:012C)   
[  373.233977][ T4325] usb 1-1: vub300 testing BULK OUT EndPoint(0) 0B
[  373.256605][ T4325] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs
[  373.403200][ T4325] vub300: probe of 1-1:0.133 failed with error -22
[  373.617120][ T4325] usb 1-1: USB disconnect, device number 13
[  378.777242][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  378.783673][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  378.819658][ T7586] netlink: 76 bytes leftover after parsing attributes in process `syz.1.881'.
[  379.806235][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'.
[  383.840325][ T4339] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  384.029256][ T4339] usb 3-1: Using ep0 maxpacket: 8
[  384.044909][ T4339] usb 3-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64
[  384.848979][ T4339] usb 3-1: config 1 interface 0 has no altsetting 0
[  384.891171][ T4339] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  384.923884][ T4339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.942260][ T4339] usb 3-1: Product: syz
[  384.985349][ T4339] usb 3-1: Manufacturer: syz
[  385.011053][ T4339] usb 3-1: SerialNumber: syz
[  385.087076][ T7652] netlink: 20 bytes leftover after parsing attributes in process `syz.4.895'.
[  385.594172][ T7626] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  388.299216][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.899'.
[  390.838778][ T4339] usb 3-1: USB disconnect, device number 23
[  391.558962][ T4340] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  391.800742][ T4340] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  391.832609][ T4340] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  391.899112][ T4340] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  391.931137][ T4340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  392.750622][ T4340] usb 1-1: SerialNumber: syz
[  392.903113][ T4340] usb 1-1: can't set config #1, error -71
[  392.913160][ T4340] usb 1-1: USB disconnect, device number 14
[  393.144355][   T22] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  394.232142][   T22] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  394.300450][   T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.568569][   T22] usb 6-1: config 0 descriptor??
[  394.913051][   T22] usb 6-1: selecting invalid altsetting 3
[  395.005691][   T22] comedi comedi5: could not set alternate setting 3 in high speed
[  395.135942][   T22] usbduxsigma 6-1:0.0: driver 'usbduxsigma' failed to auto-configure device.
[  395.340882][ T7732] usb usb1: check_ctrlrecip: process 7732 (syz.4.913) requesting ep 01 but needs 81
[  395.352742][ T7732] usb usb1: usbfs: process 7732 (syz.4.913) did not claim interface 0 before use
[  395.406186][ T7732] tmpfs: Unknown parameter 'quota'
[  395.410900][   T22] usbduxsigma: probe of 6-1:0.0 failed with error -22
[  395.989312][   T22] usb 6-1: USB disconnect, device number 8
[  396.088949][ T5702] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  396.546682][ T5702] usb 2-1: Using ep0 maxpacket: 8
[  396.570863][ T5702] usb 2-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64
[  399.113548][ T5702] usb 2-1: config 1 interface 0 has no altsetting 0
[  399.128405][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.914'.
[  399.148148][ T5702] usb 2-1: string descriptor 0 read error: -71
[  399.159088][ T5702] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  399.185527][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.648659][ T5702] usb 2-1: can't set config #1, error -71
[  399.657051][ T5702] usb 2-1: USB disconnect, device number 11
[  403.797080][   T26] kauditd_printk_skb: 25 callbacks suppressed
[  403.797096][   T26] audit: type=1326 audit(1767166144.293:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7783 comm="syz.1.925" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f759618f749 code=0x0
[  403.859018][ T5700] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  404.851494][ T5700] usb 5-1: Using ep0 maxpacket: 8
[  404.858505][ T5700] usb 5-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64
[  404.916437][ T5700] usb 5-1: config 1 interface 0 has no altsetting 0
[  404.968059][ T5700] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  405.011839][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.056096][ T5700] usb 5-1: Product: syz
[  405.086749][ T5700] usb 5-1: Manufacturer: syz
[  405.125942][ T5700] usb 5-1: SerialNumber: syz
[  405.182386][ T7794] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  407.324936][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'.
[  409.311661][ T5700] usb 5-1: USB disconnect, device number 14
[  412.481416][ T7860] netlink: 36 bytes leftover after parsing attributes in process `syz.2.940'.
[  412.533724][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.940'.
[  414.617309][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.946'.
[  414.692453][ T7883] device syzkaller1 entered promiscuous mode
[  419.629062][ T5700] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  420.539007][ T5700] usb 6-1: Using ep0 maxpacket: 32
[  420.546328][ T5700] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  420.578892][ T5700] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  420.679095][ T5700] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  420.688160][ T5700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  420.789014][ T5700] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  421.640172][ T5700] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  421.718497][ T5700] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  421.750621][ T5700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.948313][ T5700] usb 6-1: config 0 descriptor??
[  423.226815][ T5700] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  423.316131][ T5700] usb 6-1: USB disconnect, device number 9
[  423.456791][ T5700] usblp0: removed
[  425.232906][ T7968] random: crng reseeded on system resumption
[  426.952544][ T4280] Bluetooth: hci4: link tx timeout
[  426.957842][ T4280] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  426.965696][ T4280] Bluetooth: hci4: link tx timeout
[  426.970908][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  431.259140][ T4339] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  431.693656][ T4339] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  431.757297][ T4339] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  431.843343][ T4339] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  431.919417][ T4339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.946169][ T8032] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  432.234302][ T4339] usb 1-1: USB disconnect, device number 15
[  433.004794][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.990'.
[  433.059068][   T26] audit: type=1326 audit(1767166173.553:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759618f749 code=0x7ffc0000
[  433.141266][   T26] audit: type=1326 audit(1767166173.563:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759618f749 code=0x7ffc0000
[  433.188349][   T26] audit: type=1326 audit(1767166173.593:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f759618f749 code=0x7ffc0000
[  433.227553][   T26] audit: type=1326 audit(1767166173.593:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759618f749 code=0x7ffc0000
[  433.319769][   T26] audit: type=1326 audit(1767166173.593:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759618f749 code=0x7ffc0000
[  436.038963][ T4365] usb 2-1: new low-speed USB device number 12 using dummy_hcd
[  437.294016][ T4365] usb 2-1: device descriptor read/64, error -71
[  441.068373][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  441.075157][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  442.919094][   T14] usb 6-1: new low-speed USB device number 10 using dummy_hcd
[  443.630955][   T14] usb 6-1: config index 0 descriptor too short (expected 1307, got 27)
[  443.679917][   T14] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  443.776998][   T14] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  443.788679][   T14] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  443.800152][   T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 63, changing to 4
[  443.837846][   T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 43530, setting to 0
[  443.864231][   T14] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  443.896544][   T14] usb 6-1: string descriptor 0 read error: -22
[  443.908502][ T8168] 
[  443.908536][   T14] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  443.910896][ T8168] ======================================================
[  443.910905][ T8168] WARNING: possible circular locking dependency detected
[  443.910918][ T8168] syzkaller #0 Not tainted
[  443.910928][ T8168] ------------------------------------------------------
[  443.910935][ T8168] syz.1.1016/8168 is trying to acquire lock:
[  443.910946][ T8168] ffff8880543e9458
[  443.945138][   T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.945516][ T8168]  ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xd4/0xa60
[  443.973356][ T8168] 
[  443.973356][ T8168] but task is already holding lock:
[  443.978249][   T14] usb 6-1: config 0 descriptor??
[  443.980784][ T8168] ffff8880543e8130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530
[  443.994865][ T8168] 
[  443.994865][ T8168] which lock already depends on the new lock.
[  443.994865][ T8168] 
[  444.005302][ T8168] 
[  444.005302][ T8168] the existing dependency chain (in reverse order) is:
[  444.014367][ T8168] 
[  444.014367][ T8168] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}:
[  444.014421][   T14] hub 6-1:0.0: bad descriptor, ignoring hub
[  444.022151][ T8168]        lock_sock_nested+0x44/0x100
[  444.022189][ T8168]        smc_listen_out+0x109/0x3d0
[  444.022220][ T8168]        process_one_work+0x898/0x1160
[  444.037360][   T14] hub: probe of 6-1:0.0 failed with error -5
[  444.038675][ T8168]        worker_thread+0xaa2/0x1250
[  444.038704][ T8168]        kthread+0x29d/0x330
[  444.060074][ T8168]        ret_from_fork+0x1f/0x30
[  444.065081][ T8168] 
[  444.065081][ T8168] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}:
[  444.075319][ T8168]        __lock_acquire+0x2cf8/0x7c50
[  444.080756][ T8168]        lock_acquire+0x1b4/0x490
[  444.085880][ T8168]        __flush_work+0xed/0xa60
[  444.090916][ T8168]        __cancel_work_timer+0x3ac/0x520
[  444.096611][ T8168]        smc_clcsock_release+0x5c/0xe0
[  444.102140][ T8168]        __smc_release+0x661/0x7d0
[  444.107305][ T8168]        smc_close_non_accepted+0xd1/0x1f0
[  444.113177][ T8168]        smc_close_active+0xb00/0xea0
[  444.118607][ T8168]        __smc_release+0x8d/0x7d0
[  444.123687][ T8168]        smc_release+0x2ca/0x530
[  444.128683][ T8168]        sock_close+0xd5/0x240
[  444.133489][ T8168]        __fput+0x22c/0x920
[  444.138039][ T8168]        task_work_run+0x1ca/0x250
[  444.141159][ T8169] netlink: 'syz.4.1017': attribute type 10 has an invalid length.
[  444.143188][ T8168]        exit_to_user_mode_loop+0xe6/0x110
[  444.156889][ T8168]        exit_to_user_mode_prepare+0xee/0x180
[  444.163020][ T8168]        syscall_exit_to_user_mode+0x16/0x40
[  444.169046][ T8168]        do_syscall_64+0x58/0xa0
[  444.174044][ T8168]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  444.180514][ T8168] 
[  444.180514][ T8168] other info that might help us debug this:
[  444.180514][ T8168] 
[  444.190788][ T8168]  Possible unsafe locking scenario:
[  444.190788][ T8168] 
[  444.196934][ T8169] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  444.198333][ T8168]        CPU0                    CPU1
[  444.198340][ T8168]        ----                    ----
[  444.217627][ T8168]   lock(sk_lock-AF_SMC/1);
[  444.222184][ T8168]                                lock((work_completion)(&new_smc->smc_listen_work));
[  444.232208][ T8168]                                lock(sk_lock-AF_SMC/1);
[  444.239293][ T8168]   lock((work_completion)(&new_smc->smc_listen_work));
[  444.246461][ T8168] 
[  444.246461][ T8168]  *** DEADLOCK ***
[  444.246461][ T8168] 
[  444.254646][ T8168] 2 locks held by syz.1.1016/8168:
[  444.259806][ T8168]  #0: ffff888055caa610 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  444.270056][ T8168]  #1: ffff8880543e8130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530
[  444.279551][ T8168] 
[  444.279551][ T8168] stack backtrace:
[  444.285488][ T8168] CPU: 1 PID: 8168 Comm: syz.1.1016 Not tainted syzkaller #0
[  444.292908][ T8168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  444.303533][ T8168] Call Trace:
[  444.306858][ T8168]  <TASK>
[  444.309830][ T8168]  dump_stack_lvl+0x168/0x22e
[  444.314571][ T8168]  ? load_image+0x3b0/0x3b0
[  444.319142][ T8168]  ? show_regs_print_info+0x12/0x12
[  444.324401][ T8168]  ? print_circular_bug+0x12b/0x1a0
[  444.329663][ T8168]  check_noncircular+0x274/0x310
[  444.334662][ T8168]  ? add_chain_block+0x940/0x940
[  444.339662][ T8168]  ? lockdep_lock+0xdc/0x1e0
[  444.344314][ T8168]  ? rcu_is_watching+0x11/0xa0
[  444.349146][ T8168]  ? lock_release+0xd4/0x910
[  444.350878][   T14] usb 6-1: USB disconnect, device number 10
[  444.353779][ T8168]  ? _find_first_zero_bit+0xcf/0x100
[  444.353807][ T8168]  __lock_acquire+0x2cf8/0x7c50
[  444.353838][ T8168]  ? __lock_acquire+0x7c50/0x7c50
[  444.374999][ T8168]  ? is_bpf_text_address+0x28b/0x2a0
[  444.380363][ T8168]  ? hlock_conflict+0x59/0x1f0
[  444.385194][ T8168]  ? verify_lock_unused+0x140/0x140
[  444.390454][ T8168]  ? __bfs+0x2a3/0x5c0
[  444.394581][ T8168]  ? check_path+0x40/0x40
[  444.398973][ T8168]  ? mark_lock+0x94/0x320
[  444.403364][ T8168]  ? __lock_acquire+0x13c0/0x7c50
[  444.408449][ T8168]  ? add_chain_block+0x940/0x940
[  444.413452][ T8168]  lock_acquire+0x1b4/0x490
[  444.418015][ T8168]  ? __flush_work+0xd4/0xa60
[  444.422669][ T8168]  ? __lock_acquire+0x13c0/0x7c50
[  444.427753][ T8168]  ? read_lock_is_recursive+0x10/0x10
[  444.433182][ T8168]  ? verify_lock_unused+0x140/0x140
[  444.438445][ T8168]  ? __flush_work+0xd4/0xa60
[  444.443106][ T8168]  __flush_work+0xed/0xa60
[  444.447588][ T8168]  ? __flush_work+0xd4/0xa60
[  444.452307][ T8168]  ? verify_lock_unused+0x140/0x140
[  444.457579][ T8168]  ? flush_work+0x20/0x20
[  444.461968][ T8168]  ? try_to_grab_pending+0xf1/0x840
[  444.467223][ T8168]  ? lockdep_hardirqs_off+0x70/0x100
[  444.472574][ T8168]  ? mark_lock+0x94/0x320
[  444.476958][ T8168]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  444.482996][ T8168]  ? lock_chain_count+0x20/0x20
[  444.487901][ T8168]  ? __cancel_work_timer+0x331/0x520
[  444.493255][ T8168]  __cancel_work_timer+0x3ac/0x520
[  444.498428][ T8168]  ? cancel_work_sync+0x20/0x20
[  444.503392][ T8168]  ? __smc_release+0x659/0x7d0
[  444.508218][ T8168]  ? __local_bh_enable_ip+0x12a/0x1b0
[  444.513652][ T8168]  ? lockdep_hardirqs_on+0x94/0x140
[  444.518899][ T8168]  ? __local_bh_enable_ip+0x12a/0x1b0
[  444.524334][ T8168]  ? _local_bh_enable+0xa0/0xa0
[  444.529253][ T8168]  smc_clcsock_release+0x5c/0xe0
[  444.534264][ T8168]  __smc_release+0x661/0x7d0
[  444.538912][ T8168]  ? do_raw_spin_unlock+0x11d/0x230
[  444.544171][ T8168]  smc_close_non_accepted+0xd1/0x1f0
[  444.549521][ T8168]  smc_close_active+0xb00/0xea0
[  444.554436][ T8168]  ? sock_no_sendpage_locked+0x160/0x160
[  444.560122][ T8168]  __smc_release+0x8d/0x7d0
[  444.564653][ T8168]  ? do_raw_spin_unlock+0x11d/0x230
[  444.569876][ T8168]  smc_release+0x2ca/0x530
[  444.574314][ T8168]  sock_close+0xd5/0x240
[  444.578571][ T8168]  ? sock_mmap+0x90/0x90
[  444.582815][ T8168]  __fput+0x22c/0x920
[  444.586843][ T8168]  task_work_run+0x1ca/0x250
[  444.591446][ T8168]  ? task_work_cancel+0x230/0x230
[  444.596480][ T8168]  ? __close_range+0x1c5/0x730
[  444.601267][ T8168]  ? exit_to_user_mode_loop+0x3b/0x110
[  444.606744][ T8168]  exit_to_user_mode_loop+0xe6/0x110
[  444.612049][ T8168]  exit_to_user_mode_prepare+0xee/0x180
[  444.617617][ T8168]  syscall_exit_to_user_mode+0x16/0x40
[  444.623092][ T8168]  do_syscall_64+0x58/0xa0
[  444.627570][ T8168]  ? clear_bhb_loop+0x60/0xb0
[  444.632277][ T8168]  ? clear_bhb_loop+0x60/0xb0
[  444.637058][ T8168]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  444.642974][ T8168] RIP: 0033:0x7f759618f749
[  444.647412][ T8168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  444.667043][ T8168] RSP: 002b:00007f759705d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  444.675565][ T8168] RAX: 0000000000000000 RBX: 00007f75963e5fa0 RCX: 00007f759618f749
[  444.683582][ T8168] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003
[  444.691570][ T8168] RBP: 00007f7596213f91 R08: 0000000000000000 R09: 0000000000000000
[  444.699596][ T8168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  444.707580][ T8168] R13: 00007f75963e6038 R14: 00007f75963e5fa0 R15: 00007fffb9622a68
[  444.715569][ T8168]  </TASK>