last executing test programs:

5.031037989s ago: executing program 4 (id=740):
select(0x0, 0x0, &(0x7f0000000040)={0x4, 0x472, 0x1, 0x25, 0x101, 0x8000000000000001, 0x0, 0x3}, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3, 0x10, "3eccd8010000000000000010000000040100"})
close(r0)

3.794405759s ago: executing program 4 (id=749):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r3=>0x0, 0x0, <r4=>0x0], &(0x7f0000000040), 0x3, r2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff})
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x41)
ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000001c0)={0x10000000, 0xf, 0xffffffffffffff85})

3.637504034s ago: executing program 4 (id=751):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd2(0xf5c, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000280)=0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000d, 0x7, 0x0, 0x2, 0xfffffffffffffffe, 0x40008000000005, 0xfffffffffffffffd, 0x59, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x6, 0x1, 0x7], 0x8000000, 0x8340})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x2, r2})
userfaultfd(0x801)
socket$kcm(0x2, 0x3, 0x2)

3.602985915s ago: executing program 3 (id=752):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {0x2, 0xb}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0e9}, 0x4000010)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

3.43764883s ago: executing program 2 (id=754):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0)

3.353043803s ago: executing program 3 (id=756):
open(&(0x7f0000000140)='./file0\x00', 0x2a4c2, 0x0)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fanotify_init(0x1, 0x80000)
socket(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @empty}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x64010102}, 0x11b, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x200004, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

3.086139371s ago: executing program 3 (id=757):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x23e002, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x27, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x86, 0x1, 0x9, 0xdedb, 0x10, "00fa0e694b00"})
ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000001c0)=0x1)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2000002061, &(0x7f0000000480))
getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xffffffffffffffaa)
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f8000000190001000000000000000000200100000000000000000000000000007f00000100000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0001000000000000ac00000000000000ff0f0000000000000f000000000000000000000000000000ffffffffffffffffffffff7f000000000000010000000000ffffffffffffffff000a000000000000000000000080400000000000000000080000000000000000010000034400050000000000000000000000000000000000000004d23c00000000000000ffffffff00000000000000000000000000000000000300004900"/176], 0xf8}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000", @ANYBLOB="22564ad603a20472b9362e90eefda4", @ANYBLOB="1ae3c92c6f92387f4e30db19a9e55ce8ab8f4edebea994267eb28a6506c39531399bf9591cd9a62ebf9f130fc3584537", @ANYRES8=r1, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYRESDEC, @ANYRES64=r4], 0xfc}}, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
r9 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000002580)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0xffffffff}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
syz_open_dev$swradio(0x0, 0x0, 0x2)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x0)

3.038779853s ago: executing program 0 (id=758):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r0, 0xc008ae88, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

3.024798973s ago: executing program 2 (id=759):
openat$procfs(0xffffffffffffff9c, &(0x7f0000002740)='/proc/bus/input/devices\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x55, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4, 0x0, 0x1ff}, {0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x3, 0x0, 0x2}, {0xeda7, 0x4, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xff, 0x1}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x2404cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0x2, 0x2000000000003ff, 0x80000000002], 0x0, 0x200306})
pipe(&(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.962504925s ago: executing program 1 (id=760):
r0 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0)
poll(&(0x7f0000000000)=[{r0, 0x62}], 0x1, 0x7)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)

2.691488814s ago: executing program 0 (id=761):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r3=>0x0, 0x0, <r4=>0x0], &(0x7f0000000040), 0x3, r2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff})
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x41)
ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000001c0)={0x10000000, 0xf, 0xffffffffffffff85})

2.690727334s ago: executing program 4 (id=762):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x14e)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50)
syz_emit_vhci(&(0x7f00000019c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@any, 0x7, 0x0, "8f5c93", 0x1, 0x99}]}}}, 0x12)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28)
syz_open_procfs(0x0, &(0x7f0000001080)='fd\x00')
write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef)
dup2(r2, r0)

2.492764531s ago: executing program 0 (id=763):
unshare(0x4020400)
syz_open_procfs(0xffffffffffffffff, 0x0)
socket(0x2b, 0x1, 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x9, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0xfffd, 0x242, 0x3, 0xe, 0x10000, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xd, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x0, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x1, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x7f, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xaa, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c)
syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x918)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$inet_sctp(0x2, 0x1, 0x84)
pselect6(0x40, &(0x7f0000000600)={0xf339, 0x0, 0x3, 0x40, 0x3, 0x5ed1, 0x0, 0x1000000000000007}, 0x0, 0x0, 0x0, 0x0)

1.981669027s ago: executing program 2 (id=764):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="98"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0x2020)

1.727234185s ago: executing program 1 (id=765):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003800)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240440d5}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880)

1.655410197s ago: executing program 0 (id=766):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f8", 0x2d}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4", 0xbd}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473e", 0xdc}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.406978695s ago: executing program 1 (id=767):
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002880))
r1 = dup(r0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x220002, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0xe000})
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r1})

1.367805516s ago: executing program 4 (id=768):
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118)
ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r4, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0xfb, 0xa, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x2}})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
unshare(0x62050c00)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.26563233s ago: executing program 3 (id=769):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0)

1.154884423s ago: executing program 1 (id=770):
syz_open_dev$tty1(0xc, 0x4, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38)
ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)={0x2c3, 0x3}})
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000040)={0x8000001, 0x0, &(0x7f0000000080), 0x0, 0x4})
open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000))
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x3)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1300000027000100fd0f005c4832b54c01"], 0x50}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

1.038059637s ago: executing program 2 (id=771):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r0, 0xc008ae88, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

962.834279ms ago: executing program 1 (id=772):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000001001000c030300240001000001080006040001aaaa"], 0x2a)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

560.669013ms ago: executing program 0 (id=773):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r2=>0x0, 0x0, <r3=>0x0], &(0x7f0000000040), 0x3, r1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r1], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r3, r2, r2], &(0x7f0000000340), 0x0, 0xffffffffffffffff})
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x41)
ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000001c0)={0x10000000, 0xf, 0xffffffffffffff85})

528.658053ms ago: executing program 2 (id=774):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d43"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4", 0xbd}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc", 0x37}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)}], 0x1}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

404.607877ms ago: executing program 1 (id=775):
openat$procfs(0xffffffffffffff9c, &(0x7f0000002740)='/proc/bus/input/devices\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x55, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4, 0x0, 0x1ff}, {0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x3, 0x0, 0x2}, {0xeda7, 0x4, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xff, 0x1}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x2404cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0x2, 0x2000000000003ff, 0x80000000002], 0x0, 0x200306})
pipe(&(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

403.841417ms ago: executing program 3 (id=776):
unshare(0x4020400)
syz_open_procfs(0xffffffffffffffff, 0x0)
socket(0x2b, 0x1, 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x9, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0xfffd, 0x242, 0x3, 0xe, 0x10000, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xd, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x0, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x1, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x7f, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xaa, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c)
syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x918)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$inet_sctp(0x2, 0x1, 0x84)
pselect6(0x40, &(0x7f0000000600)={0xf339, 0x0, 0x3, 0x40, 0x3, 0x5ed1, 0x0, 0x1000000000000007}, 0x0, 0x0, 0x0, 0x0)

390.511928ms ago: executing program 0 (id=777):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x6, 0x248, 0x9b99}, 0x4c, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xfffffffe, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x80, 0x9, 0xf9a2, 0x80000001, 0xfe, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0x86, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000072, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x1e20, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x6, 0x1003, 0x8, 0xffffff7f, 0x400, 0x6, 0x400, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x80203, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x5, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x8000, 0x9, 0x3, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x2, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x20000002, 0x2, 0x6, 0x8000, 0xf45, 0x401, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x100055, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x10009d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0xbd, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x8bdc, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0xfffffffd, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x800009, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x2000001, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x40001, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000080)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

153.874335ms ago: executing program 3 (id=778):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x14e)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50)
syz_emit_vhci(&(0x7f00000019c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@any, 0x7, 0x0, "8f5c93", 0x1, 0x99}]}}}, 0x12)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28)
syz_open_procfs(0x0, &(0x7f0000001080)='fd\x00')
write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef)
dup2(r2, r0)

95.711357ms ago: executing program 4 (id=779):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x23e002, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x27, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x86, 0x1, 0x9, 0xdedb, 0x10, "00fa0e694b00"})
ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000001c0)=0x1)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2000002061, &(0x7f0000000480))
getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xffffffffffffffaa)
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f8000000190001000000000000000000200100000000000000000000000000007f00000100000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0001000000000000ac00000000000000ff0f0000000000000f000000000000000000000000000000ffffffffffffffffffffff7f000000000000010000000000ffffffffffffffff000a000000000000000000000080400000000000000000080000000000000000010000034400050000000000000000000000000000000000000004d23c00000000000000ffffffff00000000000000000000000000000000000300004900"/176], 0xf8}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000", @ANYBLOB="22564ad603a20472b9362e90eefda4", @ANYBLOB="1ae3c92c6f92387f4e30db19a9e55ce8ab8f4edebea994267eb28a6506c39531399bf9591cd9a62ebf9f130fc3584537", @ANYRES8=r1, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYRESDEC, @ANYRES64=r4], 0xfc}}, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
r9 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000002580)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0xffffffff}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
syz_open_dev$swradio(0x0, 0x0, 0x2)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x0)

0s ago: executing program 2 (id=780):
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002880))
r1 = dup(r0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x220002, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0xe000})
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r1})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts.
[   61.174213][ T4176] cgroup: Unknown subsys name 'net'
[   61.331655][ T4176] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   62.859792][ T4176] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   64.325378][ T4194] chnl_net:caif_netlink_parms(): no params data found
[   64.416557][ T4202] chnl_net:caif_netlink_parms(): no params data found
[   64.431525][ T4189] chnl_net:caif_netlink_parms(): no params data found
[   64.441996][ T4188] chnl_net:caif_netlink_parms(): no params data found
[   64.483776][ T4197] chnl_net:caif_netlink_parms(): no params data found
[   64.574772][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.582706][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.591063][ T4194] device bridge_slave_0 entered promiscuous mode
[   64.606328][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.613687][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.622260][ T4202] device bridge_slave_0 entered promiscuous mode
[   64.633720][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.641591][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.650171][ T4194] device bridge_slave_1 entered promiscuous mode
[   64.664476][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.671852][ T4202] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.680007][ T4202] device bridge_slave_1 entered promiscuous mode
[   64.714707][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.722140][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.730524][ T4189] device bridge_slave_0 entered promiscuous mode
[   64.761277][ T4202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.776734][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.783814][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.792391][ T4189] device bridge_slave_1 entered promiscuous mode
[   64.809207][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.820770][ T4202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.855991][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.869725][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.892119][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.899542][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.907885][ T4197] device bridge_slave_0 entered promiscuous mode
[   64.916678][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.926071][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.933138][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.941045][ T4188] device bridge_slave_0 entered promiscuous mode
[   64.960500][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.967766][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.975499][ T4197] device bridge_slave_1 entered promiscuous mode
[   64.997313][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.004403][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.012368][ T4188] device bridge_slave_1 entered promiscuous mode
[   65.022257][ T4194] team0: Port device team_slave_0 added
[   65.030274][ T4194] team0: Port device team_slave_1 added
[   65.038348][ T4202] team0: Port device team_slave_0 added
[   65.066960][ T4189] team0: Port device team_slave_0 added
[   65.093344][ T4202] team0: Port device team_slave_1 added
[   65.100781][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.111339][ T4189] team0: Port device team_slave_1 added
[   65.118606][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.128592][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.135876][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.162688][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.176637][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.189587][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.217616][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.224596][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.250901][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.281569][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.288739][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.314958][ T4202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.339881][ T4197] team0: Port device team_slave_0 added
[   65.351749][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.359016][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.385405][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.397429][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.404403][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.430394][ T4202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.449445][ T4197] team0: Port device team_slave_1 added
[   65.458215][ T4188] team0: Port device team_slave_0 added
[   65.464662][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.471838][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.498148][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.515044][ T4188] team0: Port device team_slave_1 added
[   65.576211][ T4194] device hsr_slave_0 entered promiscuous mode
[   65.583098][ T4194] device hsr_slave_1 entered promiscuous mode
[   65.623131][ T4189] device hsr_slave_0 entered promiscuous mode
[   65.630099][ T4189] device hsr_slave_1 entered promiscuous mode
[   65.636803][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.644595][ T4189] Cannot create hsr debugfs directory
[   65.658838][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.666001][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.692079][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.714117][ T4202] device hsr_slave_0 entered promiscuous mode
[   65.721096][ T4202] device hsr_slave_1 entered promiscuous mode
[   65.727902][ T4202] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.735476][ T4202] Cannot create hsr debugfs directory
[   65.741637][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.748727][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.774814][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.790974][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.798283][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.824252][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.840265][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.847455][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.873396][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.964988][ T4197] device hsr_slave_0 entered promiscuous mode
[   65.972484][ T4197] device hsr_slave_1 entered promiscuous mode
[   65.979531][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.987430][ T4197] Cannot create hsr debugfs directory
[   66.026599][ T4191] Bluetooth: hci3: command 0x0409 tx timeout
[   66.033709][ T4191] Bluetooth: hci0: command 0x0409 tx timeout
[   66.040427][ T4191] Bluetooth: hci1: command 0x0409 tx timeout
[   66.043714][ T4188] device hsr_slave_0 entered promiscuous mode
[   66.053358][ T4188] device hsr_slave_1 entered promiscuous mode
[   66.060262][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.067962][ T4188] Cannot create hsr debugfs directory
[   66.114345][ T4191] Bluetooth: hci4: command 0x0409 tx timeout
[   66.120717][ T4191] Bluetooth: hci2: command 0x0409 tx timeout
[   66.304023][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.318825][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.334961][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.351933][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.373382][ T4194] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.389886][ T4194] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.409086][ T4194] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.421246][ T4194] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.467375][ T4202] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.479895][ T4202] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.494345][ T4202] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.504636][ T4202] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.601253][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   66.615523][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   66.647035][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   66.657628][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   66.692685][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.721565][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.739422][ T4194] 8021q: adding VLAN 0 to HW filter on device team0
[   66.758280][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.768322][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.777521][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   66.787406][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   66.797796][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   66.819939][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   66.841908][ T4189] 8021q: adding VLAN 0 to HW filter on device team0
[   66.850137][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.859215][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.868578][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.876039][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.889146][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.898732][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.909234][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.916483][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.924261][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.932280][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.941056][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.966954][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.983425][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.994699][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.004724][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.014251][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.021557][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.043045][ T4202] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.053895][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.062267][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.072124][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.081735][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.089086][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.114262][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.122537][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.147730][ T4202] 8021q: adding VLAN 0 to HW filter on device team0
[   67.158594][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.168866][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.179011][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.188341][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.197896][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.207467][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.215939][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.224143][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.233450][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.261482][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.272909][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.290857][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.303799][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.313148][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.320606][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.330554][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.340528][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.349457][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.356577][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.364254][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.373292][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.382089][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.391702][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.400860][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.409951][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.419026][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.429024][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.438539][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.457347][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.475787][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.484675][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.498712][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.509461][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.518841][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.527805][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.542422][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.557322][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.582715][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.591323][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.611086][ T4202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.625013][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.640723][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.657812][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.668442][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.678244][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.693764][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.702514][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.712282][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.721687][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.740800][ T4197] 8021q: adding VLAN 0 to HW filter on device team0
[   67.755873][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.763871][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.791866][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[   67.801985][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.812914][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.822577][  T156] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.829793][  T156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.840242][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.849806][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.859079][  T156] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.866221][  T156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.881148][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.891715][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.904495][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.914033][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.925203][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.934924][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.944037][  T151] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.951203][  T151] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.960942][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.981224][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.998733][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   68.020137][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.058604][  T156] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.065994][  T156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.074508][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   68.096839][ T4233] Bluetooth: hci1: command 0x041b tx timeout
[   68.104258][ T4233] Bluetooth: hci0: command 0x041b tx timeout
[   68.110452][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   68.118626][ T4233] Bluetooth: hci3: command 0x041b tx timeout
[   68.124777][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   68.134300][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.144947][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   68.154515][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.163460][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.174794][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.183037][ T4235] Bluetooth: hci2: command 0x041b tx timeout
[   68.184215][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   68.189176][ T4235] Bluetooth: hci4: command 0x041b tx timeout
[   68.243635][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   68.255218][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.268654][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.277102][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.284866][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.295172][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.304092][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.313088][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.320696][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.328186][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.335786][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.344348][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.353833][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.362268][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.371149][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.380461][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.402021][ T4202] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.422939][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.431186][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.441378][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.455480][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.472213][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.484409][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.498867][ T4194] device veth0_vlan entered promiscuous mode
[   68.513389][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.523486][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.534209][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.543877][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.580904][ T4194] device veth1_vlan entered promiscuous mode
[   68.609933][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.620326][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.628696][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.638665][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.648151][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.707486][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.719784][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.731282][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.740607][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.749937][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.758409][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.771845][ T4189] device veth0_vlan entered promiscuous mode
[   68.789495][ T4189] device veth1_vlan entered promiscuous mode
[   68.797903][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.813461][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.824089][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.839945][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.851902][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.862080][ T4202] device veth0_vlan entered promiscuous mode
[   68.874633][ T4194] device veth0_macvtap entered promiscuous mode
[   68.886407][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.894964][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.903503][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.911503][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.925311][ T4202] device veth1_vlan entered promiscuous mode
[   68.945398][ T4194] device veth1_macvtap entered promiscuous mode
[   68.960741][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.971698][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.989044][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   69.001552][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.012966][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   69.021119][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   69.054980][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.070772][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.092460][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.103194][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.121226][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.130776][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.142612][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   69.150624][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   69.158862][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.168106][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.180354][ T4189] device veth0_macvtap entered promiscuous mode
[   69.190763][ T4189] device veth1_macvtap entered promiscuous mode
[   69.200234][ T4202] device veth0_macvtap entered promiscuous mode
[   69.210622][ T4202] device veth1_macvtap entered promiscuous mode
[   69.241306][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.254122][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.283249][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.300299][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.311609][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.323075][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.332332][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.341354][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.378416][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.389301][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.397383][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.405308][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.413723][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.422752][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.432103][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.441218][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.450442][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.460617][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.472279][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.484142][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.496631][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.510750][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.522015][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.532216][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.546239][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.557571][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.585503][ T4197] device veth0_vlan entered promiscuous mode
[   69.592945][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.603746][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.613287][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.622522][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.632375][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.640973][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.649644][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.658636][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.678346][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.689436][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.701089][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.712256][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.724143][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.738301][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.747411][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.762597][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.772660][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.787067][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.797653][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.808063][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.817493][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.829467][ T4202] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.838949][ T4202] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.847932][ T4202] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.857983][ T4202] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.887423][ T4197] device veth1_vlan entered promiscuous mode
[   70.028281][ T4197] device veth0_macvtap entered promiscuous mode
[   70.037573][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.038176][  T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.047359][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.061255][  T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.063694][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.081918][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.093342][ T4188] device veth0_vlan entered promiscuous mode
[   70.113098][ T4197] device veth1_macvtap entered promiscuous mode
[   70.122747][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.131051][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   70.140330][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   70.155211][ T4188] device veth1_vlan entered promiscuous mode
[   70.179084][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.188416][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.191213][ T2301] Bluetooth: hci3: command 0x040f tx timeout
[   70.196858][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   70.201886][ T2301] Bluetooth: hci0: command 0x040f tx timeout
[   70.210734][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   70.222208][ T2301] Bluetooth: hci1: command 0x040f tx timeout
[   70.227802][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.234144][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.247596][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.251273][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.267482][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.270872][ T4235] Bluetooth: hci4: command 0x040f tx timeout
[   70.278378][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.284214][ T4235] Bluetooth: hci2: command 0x040f tx timeout
[   70.294140][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.310669][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.321767][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.333957][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.345984][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.357822][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.368398][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.378599][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.389164][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.400259][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.425246][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.435074][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.444824][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.455075][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.464715][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.477920][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.489079][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.498665][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.508162][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.537854][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.546949][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.557232][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.564943][ T4188] device veth0_macvtap entered promiscuous mode
[   70.565078][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.575191][ T4188] device veth1_macvtap entered promiscuous mode
[   70.605481][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.616209][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.624294][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.682730][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.693952][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.702763][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.720904][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.732557][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.744628][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.755499][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.767104][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.777710][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.787614][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.798725][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.810300][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.829838][  T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.847031][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.861236][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.866198][  T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.887353][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.895932][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.906413][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.917233][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.927863][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.938586][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.948819][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.959591][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.971237][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.981920][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.991583][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.000579][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.008915][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.018016][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.027978][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.052427][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.065055][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.075004][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.084056][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.124890][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.134967][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.167090][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.260353][  T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.269143][  T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.309257][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.316051][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.328682][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.378145][ T4275] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   71.395865][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.416228][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.470765][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.504332][  T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.526668][  T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.567300][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.266248][    T7] Bluetooth: hci1: command 0x0419 tx timeout
[   72.273584][    T7] Bluetooth: hci0: command 0x0419 tx timeout
[   72.285848][    T7] Bluetooth: hci3: command 0x0419 tx timeout
[   72.346318][    T7] Bluetooth: hci2: command 0x0419 tx timeout
[   72.358335][    T7] Bluetooth: hci4: command 0x0419 tx timeout
[   72.795703][ T1111] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   73.216573][ T1111] usb 1-1: config 150 has an invalid interface number: 204 but max is 1
[   73.234079][ T1111] usb 1-1: config 150 has an invalid descriptor of length 108, skipping remainder of the config
[   73.289308][ T1111] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 2
[   73.323023][ T1111] usb 1-1: config 150 has no interface number 0
[   73.346790][ T1111] usb 1-1: config 150 interface 204 has no altsetting 0
[   73.525898][ T1111] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[   73.555674][   T21] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   73.564988][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.597099][ T1111] usb 1-1: Product: syz
[   73.601316][ T1111] usb 1-1: Manufacturer: syz
[   73.616714][ T1111] usb 1-1: SerialNumber: syz
[   74.186638][   T21] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   74.254896][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.274939][   T21] usb 2-1: Product: syz
[   74.289946][   T21] usb 2-1: Manufacturer: syz
[   74.298553][   T21] usb 2-1: SerialNumber: syz
[   74.324594][   T21] usb 2-1: config 0 descriptor??
[   74.595811][   T21] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   75.124065][ T1111] usb 1-1: USB disconnect, device number 2
[   75.619532][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.638028][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.658622][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.675832][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.427765][ T4232] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   76.623067][ T4347] =======================================================
[   76.623067][ T4347] WARNING: The mand mount option has been deprecated and
[   76.623067][ T4347]          and is ignored by this kernel. Remove the mand
[   76.623067][ T4347]          option from the mount to silence this warning.
[   76.623067][ T4347] =======================================================
[   76.670768][   T21] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[   76.702050][   T21] usb 2-1: USB disconnect, device number 2
[   76.725405][ T4347] overlayfs: failed to resolve './file1/file0': -2
[   76.744208][ T4232] usb 3-1: Using ep0 maxpacket: 32
[   76.871179][ T4232] usb 3-1: config 0 interface 0 has no altsetting 0
[   76.890566][ T4232] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[   76.905158][ T4350] netlink: 'syz.4.23': attribute type 1 has an invalid length.
[   76.920518][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.934302][ T4350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23'.
[   76.936614][ T4232] usb 3-1: config 0 descriptor??
[   76.965230][ T4350] device dummy0 entered promiscuous mode
[   77.450256][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   77.550079][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   77.565768][ T4191] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   77.582087][ T4363] team0: Port device syz_tun added
[   77.731341][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x1
[   77.785747][ T4365] device syzkaller0 entered promiscuous mode
[   77.799054][ T4363] syz.4.28 (4363) used greatest stack depth: 20688 bytes left
[   77.831239][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   77.975780][ T4191] usb 1-1: config 0 has an invalid descriptor of length 197, skipping remainder of the config
[   77.992911][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   78.012899][ T4191] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   78.075626][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   78.083174][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   78.205715][ T4191] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   78.235230][ T4191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.256576][ T4191] usb 1-1: Product: syz
[   78.275798][ T4191] usb 1-1: Manufacturer: syz
[   78.291841][ T4191] usb 1-1: SerialNumber: syz
[   78.291839][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   78.334372][ T4191] usb 1-1: config 0 descriptor??
[   78.360015][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   78.428472][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   78.532412][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   78.638257][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   78.671280][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   78.788920][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   78.928822][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   78.948804][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   78.982461][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.010205][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.035967][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.145083][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.156525][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.203680][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.236903][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.263956][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.272766][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.289570][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.305145][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x4
[   79.321156][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.342152][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.361332][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.378516][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.396338][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.414031][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.429719][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.441988][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.456550][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.473570][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.498465][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.517626][ T4232] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x0
[   79.570885][ T4232] hid-retrode 0003:0403:97C1.0001: hidraw0: USB HID v0.04 Device [HID 0403:97c1] on usb-dummy_hcd.2-1/input0
[   79.644599][ T4232] usb 3-1: USB disconnect, device number 2
[   79.868891][ T4391] tipc: Started in network mode
[   79.873976][ T4391] tipc: Node identity 863eddcc3f29, cluster identity 4711
[   79.927240][   T26] audit: type=1326 audit(1781673780.216:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4390 comm="syz.2.34" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e41e92e59 code=0x0
[   79.935594][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   79.962568][ T4391] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.103345][ T4393] fido_id[4393]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[   80.180622][ T4394] kvm [4392]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[   80.284193][ T4235] usb 1-1: USB disconnect, device number 3
[   80.595486][ T4390] tipc: Disabling bearer <eth:syzkaller0>
[   80.782820][ T4404] binder: 4403:4404 ioctl c0306201 0 returned -14
[   80.873870][ T4405] binder: 4403:4405 ioctl c0306201 0 returned -14
[   81.546425][ T1108] cfg80211: failed to load regulatory.db
[   81.873929][ T4420] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   82.898776][ T4435] binder: BINDER_SET_CONTEXT_MGR already set
[   82.937460][ T4435] binder: 4432:4435 ioctl 4018620d 200000004a80 returned -16
[   83.129532][ T4426] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   83.165973][ T4426] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   83.970109][ T4460] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   84.028482][ T4460] kvm: pic: non byte read
[   84.041561][ T4460] kvm: pic: level sensitive irq not supported
[   84.042538][ T4460] kvm: pic: non byte read
[   84.082375][ T4460] kvm: pic: level sensitive irq not supported
[   84.082435][ T4460] kvm: pic: non byte read
[   84.122428][ T4460] kvm: pic: level sensitive irq not supported
[   84.122930][ T4460] kvm: pic: non byte read
[   84.172374][ T4460] kvm: pic: level sensitive irq not supported
[   84.172436][ T4460] kvm: pic: non byte read
[   84.775750][ T2301] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   84.857385][ T4477] syz.2.56 uses obsolete (PF_INET,SOCK_PACKET)
[   85.035752][ T2301] usb 5-1: Using ep0 maxpacket: 16
[   85.156538][ T2301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   85.286587][ T2301] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   85.310837][ T2301] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   85.365693][ T2301] usb 5-1: Manufacturer: syz
[   85.422222][ T2301] usb 5-1: config 0 descriptor??
[   86.357368][ T4495] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[   86.390015][ T4495] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[   86.600194][ T2301] usb 5-1: USB disconnect, device number 2
[   87.338271][   T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   87.716147][   T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   87.785918][   T21] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   87.804430][   T21] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[   87.815768][   T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.836650][   T21] usb 3-1: config 0 descriptor??
[   88.015761][ T2301] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   88.425888][ T2301] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[   88.443989][ T2301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.496676][ T2301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.553410][ T2301] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   88.579260][ T2301] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   88.588917][ T2301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.602706][ T2301] usb 5-1: config 0 descriptor??
[   88.620151][ T1108] usb 3-1: USB disconnect, device number 3
[   89.097943][ T2301] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   89.107814][ T2301] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   89.122747][ T2301] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   89.164574][ T2301] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   89.184095][ T2301] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   89.187019][ T4524] device syzkaller0 entered promiscuous mode
[   89.201938][ T2301] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   89.215753][ T2301] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   89.228155][ T2301] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   89.239307][ T2301] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   89.248121][ T2301] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   89.258803][ T2301] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   89.282556][ T2301] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   89.304306][ T2301] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   89.320446][ T2301] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   89.333793][ T2301] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   89.358611][ T2301] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[   89.395152][ T2301] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   89.423154][ T2301] usb 5-1: USB disconnect, device number 3
[   89.701976][ T4529] fido_id[4529]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   89.915810][ T4204] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   90.087372][ T4543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.74'.
[   90.143490][ T4550] device syzkaller0 entered promiscuous mode
[   90.154091][ T4547] device syzkaller0 entered promiscuous mode
[   90.207318][ T4204] usb 3-1: Using ep0 maxpacket: 32
[   90.359281][ T4204] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[   90.378447][ T4204] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   90.400255][ T4204] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[   90.416355][ T4204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   90.436104][ T4204] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   90.461257][ T4204] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   90.518841][ T4204] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   90.549718][ T4204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.618127][ T4204] usb 3-1: config 0 descriptor??
[   90.894598][   T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   90.911425][ T4204] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   90.963287][ T4204] usb 3-1: USB disconnect, device number 4
[   91.013365][ T4204] usblp0: removed
[   91.205782][   T21] usb 4-1: Using ep0 maxpacket: 32
[   91.347248][   T21] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[   91.365219][   T21] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   91.384433][   T21] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[   91.404170][   T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   91.415883][   T21] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   91.426576][   T21] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   91.440250][   T21] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   91.449492][   T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.487060][   T21] usb 4-1: config 0 descriptor??
[   91.760834][   T21] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   92.065653][    C1] usblp0: nonzero read bulk status received: -71
[   92.089277][ T4204] usb 4-1: USB disconnect, device number 2
[   92.259029][ T4563] usblp0: removed
[   92.291140][ T4583] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.299564][ T4583] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.414166][ T4590] netlink: 68 bytes leftover after parsing attributes in process `syz.4.88'.
[   92.890213][ T4191] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   93.208887][ T4583] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.265969][ T4191] usb 1-1: config 128 interface 0 has no altsetting 0
[   93.283089][ T4191] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[   93.295487][ T4191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.304517][ T4583] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.859912][ T4614] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   93.881300][ T4614] kvm: pic: non byte read
[   93.888147][ T4614] kvm: pic: non byte read
[   93.893195][ T4614] kvm: pic: non byte read
[   93.898152][ T4614] kvm: pic: non byte read
[   93.922805][ T4583] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.932593][ T4583] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.941852][ T4583] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.951107][ T4583] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.084051][ T4583] syz.2.87 (4583) used greatest stack depth: 19312 bytes left
[   94.159180][ T4191] usb 1-1: string descriptor 0 read error: -71
[   94.175923][ T4191] usb 1-1: selecting invalid altsetting 3
[   94.182577][ T4191] comedi comedi5: could not set alternate setting 3 in high speed
[   94.190733][ T4191] usbduxsigma 1-1:128.0: driver 'usbduxsigma' failed to auto-configure device.
[   94.202088][ T4191] usbduxsigma: probe of 1-1:128.0 failed with error -22
[   94.227315][ T4191] usb 1-1: USB disconnect, device number 4
[   94.249422][ T4622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.95'.
[   94.263844][ T4622] capability: warning: `syz.0.95' uses deprecated v2 capabilities in a way that may be insecure
[   94.445756][   T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   94.585586][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   94.871068][   T21] usb 5-1: config 0 has an invalid interface number: 117 but max is 0
[   94.889166][   T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   94.900265][   T21] usb 5-1: config 0 has no interface number 0
[   94.909667][   T21] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[   94.920053][   T21] usb 5-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   95.115917][   T21] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[   95.129950][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.138506][   T21] usb 5-1: Product: syz
[   95.142834][   T21] usb 5-1: Manufacturer: syz
[   95.155735][   T21] usb 5-1: SerialNumber: syz
[   95.170754][   T21] usb 5-1: config 0 descriptor??
[   96.029859][ T4652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.104'.
[   96.234954][ T4235] usb 5-1: USB disconnect, device number 4
[   97.307255][ T4665] netlink: 56 bytes leftover after parsing attributes in process `syz.0.106'.
[   97.409758][ T4671] device syzkaller0 entered promiscuous mode
[   97.596925][ T4674] device bridge1 entered promiscuous mode
[   97.810322][ T4678] netlink: 68 bytes leftover after parsing attributes in process `syz.4.112'.
[   99.033090][ T4696] netlink: 'syz.0.118': attribute type 12 has an invalid length.
[  100.623978][ T4731] device syzkaller0 entered promiscuous mode
[  100.644513][ T4731] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.671312][ T4731] tipc: Resetting bearer <eth:syzkaller0>
[  100.691915][ T4730] tipc: Resetting bearer <eth:syzkaller0>
[  100.719451][ T4730] tipc: Disabling bearer <eth:syzkaller0>
[  101.211427][ T4742] input: syz1 as /devices/virtual/input/input5
[  101.951387][ T4756] input: syz1 as /devices/virtual/input/input6
[  102.316929][ T4761] device syzkaller0 entered promiscuous mode
[  102.384459][ T4764] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  102.391188][ T4764] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  102.431032][ T4764] vhci_hcd vhci_hcd.0: Device attached
[  102.538266][ T4765] vhci_hcd: connection closed
[  102.540442][  T151] vhci_hcd: stop threads
[  102.560620][  T151] vhci_hcd: release socket
[  102.596937][  T151] vhci_hcd: disconnect device
[  102.676834][ T4769] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (1420284373 ns) > initial count (164304968 ns). Using initial count to start timer.
[  103.015668][   T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  103.280801][   T13] usb 1-1: Using ep0 maxpacket: 16
[  103.405849][   T13] usb 1-1: unable to get BOS descriptor or descriptor too short
[  103.465719][   T13] usb 1-1: unable to read config index 0 descriptor/start: -71
[  103.479934][   T13] usb 1-1: can't read configurations, error -71
[  104.078979][ T4793] device syz_tun entered promiscuous mode
[  104.102201][ T4793] device vlan0 entered promiscuous mode
[  104.500489][ T4803] netlink: 'syz.0.150': attribute type 21 has an invalid length.
[  104.528134][ T4803] netlink: 'syz.0.150': attribute type 7 has an invalid length.
[  105.153818][ T4808] netlink: 64 bytes leftover after parsing attributes in process `syz.0.152'.
[  105.471330][ T4813] device syzkaller0 entered promiscuous mode
[  105.510711][ T4813] tipc: Started in network mode
[  105.528711][ T4813] tipc: Node identity 76cc80f8155c, cluster identity 4711
[  105.549140][ T4813] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.583226][ T4814] tipc: Resetting bearer <eth:syzkaller0>
[  105.651143][ T4814] tipc: Disabling bearer <eth:syzkaller0>
[  106.105279][ T4816] netlink: 'syz.3.155': attribute type 13 has an invalid length.
[  107.633278][ T4816] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.640897][ T4816] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.875638][ T1111] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  108.135677][ T1111] usb 1-1: Using ep0 maxpacket: 8
[  108.285858][ T1111] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  108.325711][ T1111] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  108.385625][ T1111] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  108.409856][ T1111] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  108.465750][ T1111] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  108.507158][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.820372][ T4830] udc-core: couldn't find an available UDC or it's busy
[  108.827560][ T1111] usb 1-1: usb_control_msg returned -32
[  108.833212][ T1111] usbtmc 1-1:16.0: can't read capabilities
[  108.871723][ T4830] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  108.969607][ T1111] usb 1-1: USB disconnect, device number 7
[  109.308571][ T4816] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.350299][ T4816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.607310][   T26] audit: type=1326 audit(1781673809.896:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4831 comm="syz.1.160" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efefebc4e59 code=0x0
[  110.998493][ T4816] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.017679][ T4816] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.046102][ T4816] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.069365][ T4816] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.673587][ T4850] VFS: Lookup of 'binder0' in fuse fuse would have caused loop
[  111.750921][ T4854] device syzkaller0 entered promiscuous mode
[  111.851315][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'.
[  111.884388][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'.
[  111.915103][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'.
[  111.970339][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'.
[  112.046451][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'.
[  112.062623][ T4868] kAFS: unable to lookup cell '(,c¾Ì'
[  112.356050][ T4864] sctp: failed to load transform for md5: -4
[  114.885652][   T13] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  115.256410][   T13] usb 2-1: config 0 has no interfaces?
[  115.415862][   T13] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  115.432442][   T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.460101][   T13] usb 2-1: Product: syz
[  115.479003][   T13] usb 2-1: Manufacturer: syz
[  115.483674][   T13] usb 2-1: SerialNumber: syz
[  115.509467][   T13] usb 2-1: config 0 descriptor??
[  115.864615][ T4268] usb 2-1: USB disconnect, device number 3
[  115.901230][ T4901] netlink: 'syz.4.176': attribute type 13 has an invalid length.
[  116.720290][ T4901] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.728231][ T4901] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.669050][ T4901] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.678160][ T4901] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.688474][ T4901] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.697626][ T4901] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.725819][ T2301] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  118.743703][ T4936] binder: 4935:4936 ioctl c0306201 0 returned -14
[  118.766774][ T4936] binder: 4935:4936 ioctl c0306201 0 returned -14
[  119.072103][ T1111] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  119.085863][ T2301] usb 2-1: config 0 has no interfaces?
[  119.091398][ T2301] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  119.109090][ T2301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.113998][ T1111] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  119.144848][ T2301] usb 2-1: config 0 descriptor??
[  119.425906][ T4930] udc-core: couldn't find an available UDC or it's busy
[  119.432937][ T4930] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  119.487541][   T21] usb 2-1: USB disconnect, device number 4
[  120.442444][ T4983] tipc: Started in network mode
[  120.454811][ T4983] tipc: Node identity b6e4fee44602, cluster identity 4711
[  120.464655][ T4983] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.521627][ T4989] device syzkaller0 entered promiscuous mode
[  120.548299][ T4987] device syzkaller0 entered promiscuous mode
[  120.578760][ T4983] tipc: Resetting bearer <eth:syzkaller0>
[  120.586336][   T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  120.626276][ T4982] tipc: Resetting bearer <eth:syzkaller0>
[  120.667191][ T4982] tipc: Disabling bearer <eth:syzkaller0>
[  120.689098][ T4991] binder: 4990:4991 ioctl c0306201 0 returned -14
[  120.749963][ T4994] binder: 4990:4994 ioctl c0306201 0 returned -14
[  120.841356][   T21] usb 3-1: Using ep0 maxpacket: 8
[  120.996032][   T21] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  121.012859][   T21] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  121.034272][   T21] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  121.048696][   T21] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  121.091782][   T21] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  121.137843][   T21] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  121.175035][   T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.490480][   T21] usb 3-1: usb_control_msg returned -32
[  121.496528][   T21] usbtmc 3-1:16.0: can't read capabilities
[  121.855942][ T5016] usbtmc 3-1:16.0: usb_control_msg returned -32
[  121.863683][ T2301] usb 3-1: USB disconnect, device number 5
[  122.936951][ T5035] pit: kvm: requested 132419 ns i8254 timer period limited to 200000 ns
[  122.953328][ T5045] IPv6: NLM_F_CREATE should be specified when creating new route
[  122.996924][ T5035] pit: kvm: requested 29333 ns i8254 timer period limited to 200000 ns
[  123.040738][ T5035] pit: kvm: requested 146666 ns i8254 timer period limited to 200000 ns
[  123.084130][ T5035] pit: kvm: requested 172647 ns i8254 timer period limited to 200000 ns
[  123.116509][ T5053] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.124639][ T5035] pit: kvm: requested 64533 ns i8254 timer period limited to 200000 ns
[  123.147414][ T5053] device syzkaller0 entered promiscuous mode
[  123.170479][ T5035] pit: kvm: requested 171809 ns i8254 timer period limited to 200000 ns
[  123.194648][ T5035] pit: kvm: requested 77942 ns i8254 timer period limited to 200000 ns
[  123.205337][ T5053] tipc: Resetting bearer <eth:syzkaller0>
[  123.231353][ T5035] pit: kvm: requested 181028 ns i8254 timer period limited to 200000 ns
[  123.253029][ T5035] pit: kvm: requested 63695 ns i8254 timer period limited to 200000 ns
[  123.273911][ T5052] tipc: Resetting bearer <eth:syzkaller0>
[  123.290685][ T5052] tipc: Disabling bearer <eth:syzkaller0>
[  123.300561][ T5035] pit: kvm: requested 191085 ns i8254 timer period limited to 200000 ns
[  123.983681][ T5051] netlink: 'syz.1.226': attribute type 4 has an invalid length.
[  124.355803][ T5090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.420916][ T5094] device syzkaller0 entered promiscuous mode
[  124.443321][ T5092] device syzkaller0 entered promiscuous mode
[  124.482215][ T5090] tipc: Resetting bearer <eth:syzkaller0>
[  124.494842][ T5092] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.526051][ T5089] tipc: Resetting bearer <eth:syzkaller0>
[  124.557075][ T5089] tipc: Disabling bearer <eth:syzkaller0>
[  124.576146][ T5091] tipc: Resetting bearer <eth:syzkaller0>
[  124.638822][ T5091] tipc: Disabling bearer <eth:syzkaller0>
[  124.743079][ T5101] device syzkaller0 entered promiscuous mode
[  125.765836][ T2301] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  126.049739][ T5136] tipc: Started in network mode
[  126.070898][ T5136] tipc: Node identity d66ff404aa5f, cluster identity 4711
[  126.098511][ T5136] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.130759][ T5139] device syzkaller0 entered promiscuous mode
[  126.137265][ T2301] usb 2-1: config 0 has no interfaces?
[  126.142847][ T2301] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  126.169806][ T5138] device syzkaller0 entered promiscuous mode
[  126.191632][ T2301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.235993][ T2301] usb 2-1: config 0 descriptor??
[  126.265320][ T5136] tipc: Resetting bearer <eth:syzkaller0>
[  126.284145][ T5138] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.320796][ T5135] tipc: Resetting bearer <eth:syzkaller0>
[  126.366165][ T5135] tipc: Disabling bearer <eth:syzkaller0>
[  126.377683][ T5137] tipc: Resetting bearer <eth:syzkaller0>
[  126.417051][ T5137] tipc: Disabling bearer <eth:syzkaller0>
[  126.498791][ T5119] udc-core: couldn't find an available UDC or it's busy
[  126.525670][ T5119] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  126.720260][    T7] usb 2-1: USB disconnect, device number 5
[  127.580415][ T5173] device syzkaller0 entered promiscuous mode
[  127.668165][ T5173] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.683947][ T5172] tipc: Resetting bearer <eth:syzkaller0>
[  127.730045][ T5172] tipc: Disabling bearer <eth:syzkaller0>
[  127.835721][    T7] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  128.205816][    T7] usb 3-1: config 0 has no interfaces?
[  128.366163][    T7] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  128.412897][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.460608][    T7] usb 3-1: Product: syz
[  128.471778][    T7] usb 3-1: Manufacturer: syz
[  128.478155][    T7] usb 3-1: SerialNumber: syz
[  128.496995][    T7] usb 3-1: config 0 descriptor??
[  128.748820][ T2301] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  128.809431][ T4271] usb 3-1: USB disconnect, device number 6
[  128.816113][ T1111] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  129.075791][    T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  129.195988][ T1111] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  129.207919][ T1111] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  129.224556][ T1111] usb 5-1: config 0 interface 0 has no altsetting 0
[  129.275866][ T2301] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  129.284965][ T2301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.314387][ T2301] usb 1-1: Product: syz
[  129.323056][ T2301] usb 1-1: Manufacturer: syz
[  129.331178][ T2301] usb 1-1: SerialNumber: syz
[  129.351322][ T2301] usb 1-1: config 0 descriptor??
[  129.416723][ T1111] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  129.441580][    T7] usb 4-1: config 0 has no interfaces?
[  129.444630][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  129.447244][    T7] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  129.461695][ T1111] usb 5-1: Product: syz
[  129.469621][ T1111] usb 5-1: Manufacturer: syz
[  129.487505][ T1111] usb 5-1: SerialNumber: syz
[  129.512509][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.513947][ T1111] usb 5-1: config 0 descriptor??
[  129.544347][    T7] usb 4-1: config 0 descriptor??
[  129.586852][ T1111] hub 5-1:0.0: bad descriptor, ignoring hub
[  129.603134][ T1111] hub: probe of 5-1:0.0 failed with error -5
[  129.617210][ T2301] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  129.627485][ T1111] usb 5-1: selecting invalid altsetting 0
[  129.940887][ T5199] udc-core: couldn't find an available UDC or it's busy
[  129.955206][ T5199] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  130.024270][ T4271] usb 4-1: USB disconnect, device number 3
[  130.306036][ T5192] usb 5-1: reset high-speed USB device number 5 using dummy_hcd
[  130.365706][ T1111] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  130.374787][ T5192] usb 5-1: device reset changed ep0 maxpacket size!
[  130.396389][    T7] usb 5-1: USB disconnect, device number 5
[  130.509406][ T5234] binder: 5233:5234 ioctl c0306201 0 returned -14
[  130.595718][    T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  130.768277][ T1111] usb 3-1: config 150 has an invalid interface number: 204 but max is 1
[  130.777224][ T1111] usb 3-1: config 150 has an invalid descriptor of length 104, skipping remainder of the config
[  130.790642][ T1111] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 2
[  130.800200][ T1111] usb 3-1: config 150 has no interface number 0
[  130.809389][ T1111] usb 3-1: config 150 interface 204 has no altsetting 0
[  130.835643][    T7] usb 5-1: Using ep0 maxpacket: 16
[  130.955765][    T7] usb 5-1: unable to get BOS descriptor or descriptor too short
[  130.967511][    T7] usb 5-1: no configurations
[  130.972484][    T7] usb 5-1: can't read configurations, error -22
[  131.035729][ T1111] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  131.044883][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.052996][ T1111] usb 3-1: Product: syz
[  131.057790][ T1111] usb 3-1: Manufacturer: syz
[  131.062530][ T1111] usb 3-1: SerialNumber: syz
[  131.606355][ T2301] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[  131.630039][ T2301] usb 1-1: USB disconnect, device number 8
[  131.649768][ T1111] xr_serial 3-1:150.204: skipping garbage
[  131.695716][ T1111] usb 3-1: USB disconnect, device number 7
[  132.344845][ T5273] binder: 5272:5273 ioctl c0306201 0 returned -14
[  132.738399][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.744807][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.905793][ T4271] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  132.913444][ T1111] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  133.145849][   T21] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  133.346693][ T1111] usb 4-1: config 0 has no interfaces?
[  133.353588][ T4271] usb 3-1: config 0 has no interfaces?
[  133.366234][ T4271] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  133.375346][ T4271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.406802][ T4271] usb 3-1: config 0 descriptor??
[  133.458775][ T5320] create_pit_timer: 4 callbacks suppressed
[  133.458791][ T5320] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  133.576352][ T1111] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  133.590865][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.610693][ T1111] usb 4-1: Product: syz
[  133.614998][ T1111] usb 4-1: Manufacturer: syz
[  133.630849][ T1111] usb 4-1: SerialNumber: syz
[  133.648465][ T1111] usb 4-1: config 0 descriptor??
[  133.676508][ T5274] udc-core: couldn't find an available UDC or it's busy
[  133.693924][ T5274] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  133.739628][    T7] usb 3-1: USB disconnect, device number 8
[  133.760304][   T21] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  133.779811][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.800786][   T21] usb 5-1: Product: syz
[  133.805158][   T21] usb 5-1: Manufacturer: syz
[  133.813565][   T21] usb 5-1: SerialNumber: syz
[  133.817738][ T5337] block nbd1: shutting down sockets
[  133.839235][   T21] usb 5-1: config 0 descriptor??
[  133.889808][ T5342] binder: 5341:5342 ioctl c0306201 0 returned -14
[  133.932333][ T5344] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.938963][ T1111] usb 4-1: USB disconnect, device number 4
[  133.945641][ T5344] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.955277][ T5344] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.963161][ T5344] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.115806][   T21] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  134.833378][ T5367] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  135.695839][ T4268] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  135.996164][ T5413] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  136.107383][ T4268] usb 4-1: config 0 has no interfaces?
[  136.166077][   T21] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  136.178532][   T21] usb 5-1: USB disconnect, device number 8
[  136.279620][ T4268] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  136.290186][ T4268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.311322][ T4268] usb 4-1: Product: syz
[  136.316482][ T4268] usb 4-1: Manufacturer: syz
[  136.322128][ T4268] usb 4-1: SerialNumber: syz
[  136.334108][ T4268] usb 4-1: config 0 descriptor??
[  136.643466][ T4268] usb 4-1: USB disconnect, device number 5
[  137.487859][ T5463] netlink: 68 bytes leftover after parsing attributes in process `syz.3.364'.
[  137.915616][ T4268] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  138.335984][ T4268] usb 1-1: config 0 has no interfaces?
[  138.344735][ T4268] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  138.395906][ T4268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.436821][ T4268] usb 1-1: config 0 descriptor??
[  138.866773][ T5468] udc-core: couldn't find an available UDC or it's busy
[  138.892830][ T5468] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  138.961350][ T4271] usb 1-1: USB disconnect, device number 9
[  139.614648][ T5573] Bluetooth: hci0: invalid length 0, exp 2 for type 11
[  139.993774][ T5585] binder: 5584:5585 ioctl c0306201 0 returned -14
[  140.398562][ T5603] netlink: 68 bytes leftover after parsing attributes in process `syz.2.391'.
[  140.815697][    T7] Bluetooth: hci5: command 0x1003 tx timeout
[  140.821877][ T4199] Bluetooth: hci5: sending frame failed (-49)
[  140.845616][   T21] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  141.275851][   T21] usb 1-1: config 0 has no interfaces?
[  141.281568][   T21] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  141.303507][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.304594][ T5659] Bluetooth: hci0: invalid length 0, exp 2 for type 11
[  141.336059][   T21] usb 1-1: config 0 descriptor??
[  141.589284][ T5609] udc-core: couldn't find an available UDC or it's busy
[  141.608031][ T5668] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  141.609485][ T5609] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  141.703636][   T21] usb 1-1: USB disconnect, device number 10
[  142.085918][ T5689] binder: 5688:5689 ioctl c0306201 0 returned -14
[  142.294814][ T5695] Bluetooth: hci0: invalid length 0, exp 2 for type 11
[  142.898489][ T2301] Bluetooth: hci5: command 0x1001 tx timeout
[  142.904946][ T4199] Bluetooth: hci5: sending frame failed (-49)
[  143.636536][ T5725] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  143.643120][ T5725] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  143.662213][ T5725] vhci_hcd vhci_hcd.0: Device attached
[  143.744967][ T5727] vhci_hcd: connection closed
[  143.745309][ T5537] vhci_hcd: stop threads
[  143.755754][ T5537] vhci_hcd: release socket
[  143.760204][ T5537] vhci_hcd: disconnect device
[  144.567551][ T5754] binder: 5753:5754 ioctl c0306201 0 returned -14
[  144.616953][ T2301] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  144.979731][   T13] Bluetooth: hci5: command 0x1009 tx timeout
[  144.986158][ T2301] usb 4-1: config 0 has no interfaces?
[  144.992976][ T2301] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  145.015514][ T2301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.043984][ T2301] usb 4-1: config 0 descriptor??
[  145.307492][ T5745] udc-core: couldn't find an available UDC or it's busy
[  145.325041][ T5745] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  145.529102][ T2301] usb 4-1: USB disconnect, device number 6
[  145.826587][ T5777] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  145.833147][ T5777] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  145.841789][ T5777] vhci_hcd vhci_hcd.0: Device attached
[  145.891147][ T5778] vhci_hcd: connection closed
[  145.892181][ T5539] vhci_hcd: stop threads
[  145.902248][ T5539] vhci_hcd: release socket
[  145.910385][ T5539] vhci_hcd: disconnect device
[  146.375102][ T5803] binder: 5802:5803 ioctl c0306201 0 returned -14
[  146.481115][ T5808] binder: 5802:5808 ioctl c0306201 0 returned -14
[  147.264033][ T5820] netlink: 168 bytes leftover after parsing attributes in process `syz.0.444'.
[  147.607220][ T5839] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  147.613792][ T5839] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  147.639392][ T5839] vhci_hcd vhci_hcd.0: Device attached
[  147.693885][ T5841] vhci_hcd: connection closed
[  147.694271][ T5539] vhci_hcd: stop threads
[  147.709157][ T5539] vhci_hcd: release socket
[  147.714202][ T5539] vhci_hcd: disconnect device
[  147.735666][   T13] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  148.116722][   T13] usb 5-1: config 0 has no interfaces?
[  148.122223][   T13] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  148.152713][ T5856] binder: 5855:5856 ioctl c0306201 0 returned -14
[  148.160248][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.194517][   T13] usb 5-1: config 0 descriptor??
[  148.232170][ T5859] binder: 5855:5859 ioctl c0306201 0 returned -14
[  148.469400][ T5834] udc-core: couldn't find an available UDC or it's busy
[  148.484976][ T5834] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  148.548358][ T2301] usb 5-1: USB disconnect, device number 9
[  148.935646][   T21] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[  149.335700][   T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  149.346925][   T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  149.355992][   T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  149.367483][   T21] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  149.377216][   T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.436100][ T5864] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  149.457055][   T21] hub 4-1:1.0: bad descriptor, ignoring hub
[  149.463040][   T21] hub: probe of 4-1:1.0 failed with error -5
[  149.482767][   T21] cdc_wdm 4-1:1.0: skipping garbage
[  149.489236][   T21] cdc_wdm 4-1:1.0: skipping garbage
[  149.495144][   T21] cdc_wdm 4-1:1.0: skipping garbage
[  149.512150][   T21] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  149.520847][   T21] cdc_wdm 4-1:1.0: Unknown control protocol
[  149.555669][ T4271] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  149.805832][ T4271] usb 5-1: Using ep0 maxpacket: 8
[  149.929838][ T4271] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  149.944445][ T4271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.015635][ T5889] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  150.021175][ T4271] pvrusb2: Hardware description: Terratec Grabster AV400
[  150.022197][ T5889] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  150.041323][ T4271] pvrusb2: **********
[  150.045807][ T4271] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  150.059705][ T4271] pvrusb2: Important functionality might not be entirely working.
[  150.067564][ T5889] vhci_hcd vhci_hcd.0: Device attached
[  150.074418][ T4271] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  150.095724][ T4271] pvrusb2: **********
[  150.257907][ T2426] pvrusb2: Invalid write control endpoint
[  150.333176][ T5864] cdc_wdm 4-1:1.0: Error autopm - -16
[  150.339154][    T7] usb 4-1: USB disconnect, device number 7
[  150.350676][ T2301] usb 35-1: new low-speed USB device number 3 using vhci_hcd
[  150.360861][   T13] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  150.370405][   T13] Bluetooth: hci2: Injecting HCI hardware error event
[  150.512709][ T4200] Bluetooth: hci2: hardware error 0x00
[  150.529964][ T1111] usb 5-1: USB disconnect, device number 10
[  150.641482][ T5888] cdc_wdm 4-1:1.0: Error autopm - -16
[  150.674423][ T5890] vhci_hcd: connection reset by peer
[  150.687222][ T5540] vhci_hcd: stop threads
[  150.692708][ T5540] vhci_hcd: release socket
[  150.718292][ T5540] vhci_hcd: disconnect device
[  150.853608][ T2426] pvrusb2: Invalid write control endpoint
[  150.870723][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  150.900540][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  150.908205][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  150.920730][ T2426] pvrusb2: Device being rendered inoperable
[  150.929813][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  150.937346][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  150.949264][ T2426] pvrusb2: Attached sub-driver cx25840
[  150.954936][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  150.965342][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  150.984577][ T5902] binder: 5901:5902 ioctl c0306201 0 returned -14
[  150.995766][    T7] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  151.396563][    T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  151.411409][    T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  151.421942][    T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[  151.433200][    T7] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  151.459101][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.508229][ T5884] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  151.516925][ T1111] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  151.536836][    T7] hub 4-1:1.0: bad descriptor, ignoring hub
[  151.543642][    T7] hub: probe of 4-1:1.0 failed with error -5
[  151.560715][    T7] cdc_wdm 4-1:1.0: skipping garbage
[  151.576199][    T7] cdc_wdm 4-1:1.0: skipping garbage
[  151.591974][    T7] cdc_wdm 4-1:1.0: skipping garbage
[  151.607863][    T7] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  151.620943][    T7] cdc_wdm 4-1:1.0: Unknown control protocol
[  151.895744][ T1111] usb 1-1: config 0 has no interfaces?
[  151.909630][ T1111] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  151.980318][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.011774][    T7] usb 4-1: USB disconnect, device number 8
[  152.033707][ T1111] usb 1-1: config 0 descriptor??
[  152.278648][ T5909] udc-core: couldn't find an available UDC or it's busy
[  152.288873][ T5909] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  152.323924][ T4235] usb 1-1: USB disconnect, device number 11
[  152.426426][    T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  152.846048][    T7] usb 4-1: config 0 has no interfaces?
[  152.859451][    T7] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  152.887432][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.941020][    T7] usb 4-1: config 0 descriptor??
[  153.148708][ T5967] binder: 5966:5967 ioctl c0306201 0 returned -14
[  153.196774][ T5930] udc-core: couldn't find an available UDC or it's busy
[  153.203766][ T5930] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  153.243071][ T1111] usb 4-1: USB disconnect, device number 9
[  154.729055][   T21] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  155.014083][ T6020] binder: 6019:6020 ioctl c0306201 0 returned -14
[  155.065809][    T7] Bluetooth: hci1: command 0x0406 tx timeout
[  155.139110][ T1111] usb 5-1: new low-speed USB device number 11 using dummy_hcd
[  155.285761][   T21] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  155.299677][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.321598][   T21] usb 4-1: Product: syz
[  155.325911][   T21] usb 4-1: Manufacturer: syz
[  155.343526][   T21] usb 4-1: SerialNumber: syz
[  155.359896][   T21] usb 4-1: config 0 descriptor??
[  155.465778][ T2301] vhci_hcd: vhci_device speed not set
[  155.505956][ T1111] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.516706][ T1111] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  155.530296][ T1111] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  155.545293][ T1111] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  155.558223][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.585980][ T6018] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  155.607230][ T1111] hub 5-1:1.0: bad descriptor, ignoring hub
[  155.614527][ T1111] hub: probe of 5-1:1.0 failed with error -5
[  155.625697][   T21] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  155.639533][ T1111] cdc_wdm 5-1:1.0: skipping garbage
[  155.644772][ T1111] cdc_wdm 5-1:1.0: skipping garbage
[  155.663461][ T1111] cdc_wdm 5-1:1.0: skipping garbage
[  155.673316][ T1111] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  155.682733][ T1111] cdc_wdm 5-1:1.0: Unknown control protocol
[  156.579394][ T6051] netlink: 68 bytes leftover after parsing attributes in process `syz.1.515'.
[  156.765985][ T6054] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  156.790397][ T6054] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  156.942529][ T6058] tipc: Started in network mode
[  156.970861][ T6058] tipc: Node identity aa6dd801e361, cluster identity 4711
[  157.013601][ T6058] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.052917][ T6059] device syzkaller0 entered promiscuous mode
[  157.077150][ T6057] tipc: Resetting bearer <eth:syzkaller0>
[  157.127913][ T6057] tipc: Disabling bearer <eth:syzkaller0>
[  157.625853][   T21] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  157.663803][   T21] usb 4-1: USB disconnect, device number 10
[  158.186658][ T6091] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.207493][ T6091] device syzkaller0 entered promiscuous mode
[  158.241890][ T6090] tipc: Resetting bearer <eth:syzkaller0>
[  158.283280][ T6090] tipc: Disabling bearer <eth:syzkaller0>
[  158.793972][ T6104] infiniband uyz0: set active
[  158.808860][ T6104] infiniband uyz0: added bridge_slave_1
[  158.874640][ T6104] RDS/IB: uyz0: added
[  158.880813][ T6104] smc: adding ib device uyz0 with port count 1
[  158.888298][ T6104] smc:    ib device uyz0 port 1 has pnetid 
[  159.043030][ T6112] netlink: 68 bytes leftover after parsing attributes in process `syz.2.536'.
[  160.218345][ T6018] cdc_wdm 5-1:1.0: Error autopm - -16
[  160.224105][ T1111] usb 5-1: USB disconnect, device number 11
[  160.511558][ T6174] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.540837][ T6174] device syzkaller0 entered promiscuous mode
[  160.646117][ T6173] tipc: Resetting bearer <eth:syzkaller0>
[  160.728217][ T6173] tipc: Disabling bearer <eth:syzkaller0>
[  160.744514][ T6180] Bluetooth: hci0: unsupported parameter 255
[  160.760594][ T6180] Bluetooth: hci0: unsupported parameter 255
[  160.852988][ T6186] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  160.884930][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  160.908171][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  160.924602][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  160.951198][ T6187] device bridge_slave_0 left promiscuous mode
[  160.969894][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.988632][ T6187] device bridge_slave_1 left promiscuous mode
[  160.994965][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.009636][ T6187] bond0: (slave bond_slave_0): Releasing backup interface
[  161.024899][ T6187] bond0: (slave bond_slave_1): Releasing backup interface
[  161.091698][ T6187] team0: Port device team_slave_0 removed
[  161.124668][ T6187] team0: Port device team_slave_1 removed
[  161.134602][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.146905][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.159120][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.168871][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.204257][ T6193] team0: Mode changed to "loadbalance"
[  161.552816][ T6203] binder: 6202:6203 ioctl c0306201 0 returned -14
[  161.567966][ T6203] binder: 6202:6203 ioctl c0306201 0 returned -14
[  161.608569][ T6203] binder: 6202:6203 ioctl c0306201 0 returned -14
[  161.886412][ T6208] device syzkaller0 entered promiscuous mode
[  161.914430][ T6210] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.980368][ T6214] device syzkaller0 entered promiscuous mode
[  161.994005][ T6209] tipc: Resetting bearer <eth:syzkaller0>
[  162.020457][ T6209] tipc: Disabling bearer <eth:syzkaller0>
[  162.953821][ T6250] can: request_module (can-proto-0) failed.
[  162.993722][ T6250] batman_adv: batadv0: Adding interface: dummy0
[  163.029995][ T6250] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.123096][ T6250] batman_adv: batadv0: Interface activated: dummy0
[  163.169432][ T6252] batadv0: mtu less than device minimum
[  163.189419][ T6252] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  163.202681][ T6252] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  163.215596][ T6252] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  163.228459][ T6252] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  163.241268][ T6252] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  163.254113][ T6252] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  163.266582][ T6252] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  163.278141][ T6252] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  163.289730][ T6252] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  163.888092][ T6271] binder: 6270:6271 ioctl c0306201 0 returned -14
[  163.899777][ T6271] binder: 6270:6271 ioctl c0306201 0 returned -14
[  163.907258][ T6271] binder: 6270:6271 ioctl c0306201 0 returned -14
[  164.305653][ T2301] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  164.549574][ T2301] usb 4-1: Using ep0 maxpacket: 32
[  164.675694][ T2301] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  164.686662][ T2301] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  164.703676][ T2301] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  164.712938][ T2301] usb 4-1: config 1 has no interface number 0
[  164.729495][ T2301] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  164.753571][ T2301] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  164.775444][ T2301] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  164.786764][ T2301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.848954][ T2301] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  164.865872][ T1111] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  165.196531][ T6312] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.213564][ T6312] device syzkaller0 entered promiscuous mode
[  165.226573][ T6311] tipc: Resetting bearer <eth:syzkaller0>
[  165.251080][ T6311] tipc: Disabling bearer <eth:syzkaller0>
[  165.321369][ T6314] netlink: 68 bytes leftover after parsing attributes in process `syz.2.587'.
[  165.476303][ T1111] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  165.496380][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.531887][ T1111] usb 5-1: Product: syz
[  165.550962][ T1111] usb 5-1: Manufacturer: syz
[  165.563373][ T1111] usb 5-1: SerialNumber: syz
[  165.590583][ T1111] usb 5-1: config 0 descriptor??
[  165.875756][ T1111] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  166.045161][ T6320] 9pnet_virtio: no channels available for device syz
[  166.843042][ T6330] binder: 6329:6330 ioctl c0306201 0 returned -14
[  166.852588][ T6330] binder: 6329:6330 ioctl c0306201 0 returned -14
[  166.860678][ T6330] binder: 6329:6330 ioctl c0306201 0 returned -14
[  166.942318][ T6336] comedi comedi0: multiq3: I/O port conflict (0x2,16)
[  167.005887][ T4271] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  167.055792][ T2301] snd_usb_pod 4-1:1.1: set_interface failed
[  167.062413][ T2301] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  167.063415][ T6341] netlink: 'syz.3.598': attribute type 1 has an invalid length.
[  167.081372][ T2301] snd_usb_pod: probe of 4-1:1.1 failed with error -71
[  167.106698][ T2301] usb 4-1: USB disconnect, device number 11
[  167.111851][ T6341] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  167.129276][ T6341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.598'.
[  167.139257][ T6341] 8021q: adding VLAN 0 to HW filter on device bond1
[  167.146649][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  167.257722][ T6348] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.270634][ T6348] tipc: Resetting bearer <eth:syzkaller0>
[  167.278795][ T6347] tipc: Disabling bearer <eth:syzkaller0>
[  167.365993][ T4271] usb 2-1: config 0 has no interfaces?
[  167.529496][ T6353] sch_tbf: burst 1023 is lower than device lo mtu (65550) !
[  167.547010][ T4271] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  167.556415][ T4271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.564408][ T4271] usb 2-1: Product: syz
[  167.568863][ T4271] usb 2-1: Manufacturer: syz
[  167.573483][ T4271] usb 2-1: SerialNumber: syz
[  167.580152][ T4271] usb 2-1: config 0 descriptor??
[  167.729955][ T6355] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  167.743105][ T6355] kvm: pic: non byte read
[  167.747982][ T6355] kvm: pic: non byte read
[  167.752798][ T6355] kvm: pic: non byte read
[  167.757792][ T6355] kvm: pic: non byte read
[  167.762464][ T6355] kvm: pic: non byte read
[  167.840621][ T4271] usb 2-1: USB disconnect, device number 6
[  167.896771][ T1111] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  167.920614][ T1111] usb 5-1: USB disconnect, device number 12
[  168.884299][ T6384] binder: 6383:6384 ioctl c0306201 0 returned -14
[  168.907100][ T6384] binder: 6383:6384 ioctl c0306201 0 returned -14
[  169.417825][ T6403] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  169.431523][ T6403] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  169.704544][ T2301] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  169.815747][ T6423] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  169.839181][ T6423] kvm: pic: non byte read
[  169.844339][ T6423] kvm: pic: non byte read
[  169.850373][ T6423] kvm: pic: non byte read
[  169.855174][ T6423] kvm: pic: non byte read
[  169.867121][ T6423] kvm: pic: non byte read
[  170.076141][ T2301] usb 5-1: config 0 has no interfaces?
[  170.164131][ T6436] binder: 6435:6436 ioctl c0306201 0 returned -14
[  170.178590][ T6436] binder: 6435:6436 ioctl c0306201 0 returned -14
[  170.236162][ T2301] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  170.262759][ T2301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.292156][ T2301] usb 5-1: Product: syz
[  170.296765][ T2301] usb 5-1: Manufacturer: syz
[  170.301672][ T2301] usb 5-1: SerialNumber: syz
[  170.330261][ T2301] usb 5-1: config 0 descriptor??
[  170.374054][ T6440] Cannot find del_set index 1 as target
[  170.673707][ T4271] usb 5-1: USB disconnect, device number 13
[  170.843653][ T6455] fuse: Bad value for 'fd'
[  171.400369][ T6469] binder: 6468:6469 ioctl c0306201 200000001ac0 returned -14
[  171.601399][ T6473] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  171.609950][ T6473] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  171.765821][ T4271] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  171.962607][ T6486] fuse: Bad value for 'fd'
[  172.045680][ T4271] usb 1-1: Using ep0 maxpacket: 32
[  172.073070][ T6488] binder: 6487:6488 ioctl c0306201 0 returned -14
[  172.096682][ T6488] binder: 6487:6488 ioctl c0306201 0 returned -14
[  172.225788][ T4271] usb 1-1: unable to get BOS descriptor or descriptor too short
[  172.590595][ T4271] usb 1-1: string descriptor 0 read error: -22
[  172.607174][ T4271] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[  172.640688][ T4271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.727290][ T4271] dw2102: su3000_identify_state
[  172.732204][ T4271] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[  172.771472][ T4271] dw2102: su3000_power_ctrl: 1, initialized 0
[  172.782727][ T4271] dvb-usb: bulk message failed: -22 (2/0)
[  172.816533][ T4271] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  172.889839][ T4271] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[  172.910708][ T4271] usb 1-1: media controller created
[  172.949457][ T4271] dvb-usb: bulk message failed: -22 (6/0)
[  172.983900][ T4271] dw2102: i2c transfer failed.
[  173.003366][ T4271] dvb-usb: bulk message failed: -22 (6/0)
[  173.023783][ T4271] dw2102: i2c transfer failed.
[  173.041130][ T4271] dvb-usb: bulk message failed: -22 (6/0)
[  173.056666][ T4271] dw2102: i2c transfer failed.
[  173.069999][ T4271] dvb-usb: bulk message failed: -22 (6/0)
[  173.082212][ T4271] dw2102: i2c transfer failed.
[  173.122641][ T4271] dvb-usb: bulk message failed: -22 (6/0)
[  173.139283][ T4271] dw2102: i2c transfer failed.
[  173.156850][ T4271] dvb-usb: bulk message failed: -22 (6/0)
[  173.162643][ T4271] dw2102: i2c transfer failed.
[  173.207814][ T4271] dvb-usb: MAC address: 02:02:02:02:02:02
[  173.252415][ T4271] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  173.300866][ T4271] dvb-usb: bulk message failed: -22 (3/0)
[  173.323435][ T4271] dw2102: command 0x0e transfer failed.
[  173.339487][ T4271] dvb-usb: bulk message failed: -22 (3/0)
[  173.365994][ T4271] dw2102: command 0x0e transfer failed.
[  173.372051][ T6514] device syzkaller0 entered promiscuous mode
[  173.443665][ T6521] fuse: Bad value for 'fd'
[  173.699107][ T4271] dvb-usb: bulk message failed: -22 (3/0)
[  173.720477][ T4271] dw2102: command 0x0e transfer failed.
[  173.726809][ T4271] dvb-usb: bulk message failed: -22 (3/0)
[  173.744172][ T4271] dw2102: command 0x0e transfer failed.
[  173.762546][ T4271] dvb-usb: bulk message failed: -22 (1/0)
[  173.789243][   T21] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  173.819574][ T4271] dw2102: command 0x51 transfer failed.
[  173.849544][ T6538] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  173.878859][ T6539] binder: 6535:6539 ioctl c0306201 0 returned -14
[  173.902991][ T6539] binder: 6535:6539 ioctl c0306201 0 returned -14
[  173.918980][ T4271] DVB: Unable to find symbol ds3000_attach()
[  173.928954][ T4271] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[  174.124990][ T6544] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  174.125757][ T4271] rc_core: IR keymap rc-su3000 not found
[  174.153611][ T4271] Registered IR keymap rc-empty
[  174.170506][ T4271] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  174.177369][ T6544] kvm: pic: non byte read
[  174.205986][ T4271] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input7
[  174.216528][ T6544] kvm: pic: non byte read
[  174.217356][   T21] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  174.232546][ T6544] kvm: pic: non byte read
[  174.239509][   T21] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  174.253416][ T6544] kvm: pic: non byte read
[  174.265967][ T6544] kvm: pic: non byte read
[  174.282636][ T4271] dvb-usb: schedule remote query interval to 150 msecs.
[  174.295306][   T21] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  174.317936][ T4271] dw2102: su3000_power_ctrl: 0, initialized 1
[  174.333499][   T21] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping
[  174.347111][ T4271] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[  174.360296][   T21] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  174.412232][ T4271] usb 1-1: USB disconnect, device number 12
[  174.449493][   T21] usb 3-1: config 168 interface 0 has no altsetting 0
[  174.546009][   T21] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  174.556902][   T21] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  174.628925][   T21] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  174.648590][ T4271] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[  174.673920][   T21] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping
[  174.719650][   T21] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  174.777167][   T21] usb 3-1: config 168 interface 0 has no altsetting 0
[  174.865969][   T21] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  174.873431][   T21] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  174.903419][   T21] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  174.960553][   T21] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping
[  174.998194][   T21] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  175.035242][   T21] usb 3-1: config 168 interface 0 has no altsetting 0
[  175.284800][ T6564] fuse: Bad value for 'fd'
[  175.336082][   T21] usb 3-1: string descriptor 0 read error: -22
[  175.347268][   T21] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  175.390128][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.467365][   T21] adutux 3-1:168.0: interrupt endpoints not found
[  175.676106][    T7] usb 3-1: USB disconnect, device number 9
[  175.992936][ T6582] binder: 6581:6582 ioctl c0306201 0 returned -14
[  176.005983][ T6582] binder: 6581:6582 ioctl c0306201 0 returned -14
[  176.036979][ T6578] VFS: Lookup of 'binder0' in fuse fuse would have caused loop
[  176.482904][ T6587] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  176.492162][ T6587] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  176.767467][ T4268] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  177.135854][ T4268] usb 1-1: config 0 has no interfaces?
[  177.295802][ T4268] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  177.323479][ T4268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.382167][ T4268] usb 1-1: Product: syz
[  177.408379][ T4268] usb 1-1: Manufacturer: syz
[  177.440960][ T4268] usb 1-1: SerialNumber: syz
[  177.488456][ T4268] usb 1-1: config 0 descriptor??
[  177.839707][ T4268] usb 1-1: USB disconnect, device number 13
[  178.240333][ T6636] binder: 6635:6636 ioctl c0306201 0 returned -14
[  178.262576][ T6636] binder: 6635:6636 ioctl c0306201 0 returned -14
[  178.407557][ T2301] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  178.765816][ T2301] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[  178.777574][ T2301] usb 5-1: config 0 has no interface number 0
[  178.797076][ T2301] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  178.975960][ T2301] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  178.990236][ T2301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.015610][ T2301] usb 5-1: Product: syz
[  179.033381][ T2301] usb 5-1: Manufacturer: syz
[  179.041302][ T2301] usb 5-1: SerialNumber: syz
[  179.066850][ T2301] usb 5-1: config 0 descriptor??
[  179.119005][ T2301] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[  179.241191][ T6648] device syzkaller0 entered promiscuous mode
[  179.321056][ T2301] usb 5-1: USB disconnect, device number 14
[  179.351611][ T2301] yurex 5-1:0.50: USB YUREX #0 now disconnected
[  180.359884][ T6661] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  180.407295][ T6661] kvm: pic: non byte read
[  180.430082][ T6661] kvm: pic: non byte read
[  180.459826][ T6661] kvm: pic: non byte read
[  180.464886][ T6661] kvm: pic: non byte read
[  180.491290][ T6661] kvm: pic: non byte read
[  180.674231][ T6676] binder: 6675:6676 ioctl c0306201 0 returned -14
[  180.742462][ T6677] binder: 6675:6677 ioctl c0306201 0 returned -14
[  180.756910][ T6677] binder: 6675:6677 ioctl c0306201 0 returned -14
[  181.843873][ T6707] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  182.371442][ T6717] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  182.411464][ T6717] kvm: pic: non byte read
[  182.443782][ T6717] kvm: pic: non byte read
[  182.471809][ T6717] kvm: pic: non byte read
[  182.494002][ T6717] kvm: pic: non byte read
[  182.531441][ T6717] kvm: pic: non byte read
[  182.700052][ T6733] binder: 6732:6733 ioctl c0306201 0 returned -14
[  182.780774][ T6738] binder: 6732:6738 ioctl c0306201 0 returned -14
[  182.806336][ T6738] binder: 6732:6738 ioctl c0306201 0 returned -14
[  183.383112][ T6747] device syzkaller0 entered promiscuous mode
[  183.419268][ T6747] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.467447][ T6747] tipc: Resetting bearer <eth:syzkaller0>
[  183.502052][ T6746] tipc: Resetting bearer <eth:syzkaller0>
[  183.570913][ T6746] tipc: Disabling bearer <eth:syzkaller0>
[  184.619941][ T6786] Bluetooth: hci0: unsupported parameter 255
[  184.638650][ T6786] Bluetooth: hci0: unsupported parameter 255
[  184.759479][ T6795] binder: 6794:6795 ioctl c0306201 0 returned -14
[  184.837421][ T6800] binder: 6794:6800 ioctl c0306201 0 returned -14
[  184.851893][ T6800] binder: 6794:6800 ioctl c0306201 0 returned -14
[  185.210951][ T6809] device syzkaller0 entered promiscuous mode
[  185.242536][ T6809] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.273076][ T6809] tipc: Resetting bearer <eth:syzkaller0>
[  185.322634][ T6808] tipc: Resetting bearer <eth:syzkaller0>
[  185.358710][ T6808] tipc: Disabling bearer <eth:syzkaller0>
[  185.531007][ T6819] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.561941][ T6819] tipc: Resetting bearer <eth:syzkaller0>
[  185.606959][ T6818] tipc: Disabling bearer <eth:syzkaller0>
[  185.849746][ T6829] Bluetooth: hci0: unsupported parameter 255
[  185.857405][ T6829] Bluetooth: hci0: unsupported parameter 255
[  185.959189][ T6822] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  185.980132][ T6822] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  186.179983][ T6839] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  186.213043][ T6848] vivid-001: =================  START STATUS  =================
[  186.241833][ T6839] kvm: pic: non byte read
[  186.255411][ T6848] vivid-001: Test Pattern: 75% Colorbar
[  186.268521][ T6839] kvm: pic: non byte read
[  186.285797][ T6848] vivid-001: Fill Percentage of Frame: 100
[  186.293469][ T6839] kvm: pic: non byte read
[  186.309982][ T6839] kvm: pic: non byte read
[  186.332039][ T6848] vivid-001: Horizontal Movement: No Movement
[  186.345974][ T6848] vivid-001: Vertical Movement: No Movement
[  186.384481][ T6839] kvm: pic: non byte read
[  186.394760][ T6848] vivid-001: OSD Text Mode: All
[  186.441410][ T6848] vivid-001: Show Border: false
[  186.471733][ T6848] vivid-001: Show Square: false
[  186.501357][ T6848] vivid-001: Sensor Flipped Horizontally: false
[  186.509961][ T6848] vivid-001: Sensor Flipped Vertically: false
[  186.525682][ T6848] vivid-001: Insert SAV Code in Image: false
[  186.533384][ T6848] vivid-001: Insert EAV Code in Image: false
[  186.554624][ T6848] vivid-001: Reduced Framerate: false
[  186.565668][ T6848] vivid-001: Enable Capture Cropping: false grabbed
[  186.652601][ T6848] vivid-001: Enable Capture Composing: true grabbed
[  186.680408][ T6848] vivid-001: Enable Capture Scaler: true grabbed
[  186.695814][ T6848] vivid-001: Timestamp Source: End of Frame
[  186.729962][ T6848] vivid-001: Colorspace: sRGB
[  186.745697][ T6848] vivid-001: Transfer Function: Default
[  186.756039][ T6848] vivid-001: Y'CbCr Encoding: Default
[  186.794757][ T6848] vivid-001: HSV Encoding: Hue 0-179
[  186.828931][ T6848] vivid-001: Quantization: Default
[  186.858034][ T6848] vivid-001: Apply Alpha To Red Only: false
[  186.886577][ T6848] vivid-001: Standard Aspect Ratio: 4x3
[  186.912674][ T6848] vivid-001: DV Timings Signal Mode: Current DV Timings inactive
[  186.950726][ T6848] vivid-001: DV Timings: 640x480p59 inactive
[  186.980222][ T6848] vivid-001: DV Timings Aspect Ratio: Source Width x Height
[  187.018058][ T6848] vivid-001: Maximum EDID Blocks: 2
[  187.083416][ T6848] vivid-001: Limited RGB Range (16-235): false
[  187.122433][ T6848] vivid-001: Rx RGB Quantization Range: Automatic
[  187.147351][ T6848] vivid-001: Power Present: 0x00000001
[  187.160778][ T6848] tpg source WxH: 640x360 (Y'CbCr)
[  187.174025][ T6848] tpg field: 1
[  187.185066][ T6848] tpg crop: 640x360@0x0
[  187.197969][ T6848] tpg compose: 640x360@0x0
[  187.207228][ T6861] binder: 6860:6861 ioctl c0306201 0 returned -14
[  187.217548][ T6848] tpg colorspace: 8
[  187.228686][ T6848] tpg transfer function: 0/2
[  187.241691][ T6848] tpg Y'CbCr encoding: 0/1
[  187.255233][ T6848] tpg quantization: 0/2
[  187.269434][ T6848] tpg RGB range: 0/2
[  187.280613][ T6848] vivid-001: ==================  END STATUS  ==================
[  187.302728][ T6862] binder: 6860:6862 ioctl c0306201 0 returned -14
[  187.952792][ T6878] overlayfs: missing 'lowerdir'
[  188.792748][ T6897] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  188.862235][ T6897] kvm: pic: non byte read
[  188.902049][ T6897] kvm: pic: non byte read
[  188.940644][ T6897] kvm: pic: non byte read
[  188.964745][ T6897] kvm: pic: non byte read
[  188.996159][ T6897] kvm: pic: non byte read
[  189.059927][ T4199] ------------[ cut here ]------------
[  189.065764][ T4199] WARNING: CPU: 1 PID: 4199 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450
[  189.080486][ T4199] Modules linked in:
[  189.084839][ T4199] CPU: 1 PID: 4199 Comm: kworker/u5:3 Not tainted syzkaller #0
[  189.093965][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  189.105275][ T4199] Workqueue: hci1 hci_conn_timeout
[  189.110490][ T4199] RIP: 0010:hci_conn_timeout+0x24f/0x450
[  189.116252][ T4199] Code: 8a 8d e8 34 df e1 f8 48 8b 35 f5 83 ad 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 86 8c 71 f8 e8 b1 c5 9c f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd
[  189.135944][ T4199] RSP: 0018:ffffc90002f9fc08 EFLAGS: 00010293
[  189.142031][ T4199] RAX: ffffffff88dc833f RBX: ffff8880793d0138 RCX: ffff88807b1e5940
[  189.145527][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[  189.150039][ T4199] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  189.165527][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[  189.166993][ T4199] RBP: 00000000ffffffff R08: ffff8880793d0013 R09: 1ffff1100f27a002
[  189.184255][ T4199] R10: dffffc0000000000 R11: ffffed100f27a003 R12: dffffc0000000000
[  189.185524][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[  189.192306][ T4199] R13: dffffc0000000000 R14: ffff8880793d0000 R15: ffff8880793d0010
[  189.205525][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  189.210198][ T4199] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  189.225520][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  189.236431][ T4199] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  189.243087][ T4199] CR2: 0000000000000000 CR3: 000000007c9bb000 CR4: 00000000003526e0
[  189.251173][ T4199] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  189.259218][ T4199] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  189.267280][ T4199] Call Trace:
[  189.270576][ T4199]  <TASK>
[  189.273513][ T4199]  process_one_work+0x85f/0x1010
[  189.278546][ T4199]  ? worker_detach_from_pool+0x240/0x240
[  189.284212][ T4199]  ? lockdep_hardirqs_off+0x70/0x100
[  189.289557][ T4199]  ? _raw_spin_lock_irq+0xb7/0xf0
[  189.294585][ T4199]  ? _raw_spin_lock_irqsave+0x100/0x100
[  189.300366][ T4199]  ? wq_worker_running+0x97/0x170
[  189.305414][ T4199]  worker_thread+0xaa6/0x1290
[  189.310177][ T4199]  kthread+0x436/0x520
[  189.314261][ T4199]  ? rcu_lock_release+0x20/0x20
[  189.319792][ T4199]  ? kthread_blkcg+0xd0/0xd0
[  189.324385][ T4199]  ret_from_fork+0x1f/0x30
[  189.328869][ T4199]  </TASK>
[  189.331908][ T4199] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  189.339195][ T4199] CPU: 1 PID: 4199 Comm: kworker/u5:3 Not tainted syzkaller #0
[  189.346741][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  189.356796][ T4199] Workqueue: hci1 hci_conn_timeout
[  189.361915][ T4199] Call Trace:
[  189.365214][ T4199]  <TASK>
[  189.368160][ T4199]  dump_stack_lvl+0x188/0x250
[  189.372837][ T4199]  ? show_regs_print_info+0x20/0x20
[  189.378043][ T4199]  ? load_image+0x400/0x400
[  189.382558][ T4199]  panic+0x2e5/0x810
[  189.386479][ T4199]  ? bpf_jit_dump+0xd0/0xd0
[  189.391022][ T4199]  ? ret_from_fork+0x1f/0x30
[  189.395611][ T4199]  ? hci_conn_timeout+0x24f/0x450
[  189.400645][ T4199]  __warn+0x248/0x2b0
[  189.404625][ T4199]  ? hci_conn_timeout+0x24f/0x450
[  189.409647][ T4199]  report_bug+0x1b7/0x2e0
[  189.414003][ T4199]  handle_bug+0x3a/0x70
[  189.418169][ T4199]  exc_invalid_op+0x16/0x40
[  189.422703][ T4199]  asm_exc_invalid_op+0x16/0x20
[  189.427585][ T4199] RIP: 0010:hci_conn_timeout+0x24f/0x450
[  189.433218][ T4199] Code: 8a 8d e8 34 df e1 f8 48 8b 35 f5 83 ad 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 86 8c 71 f8 e8 b1 c5 9c f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd
[  189.452858][ T4199] RSP: 0018:ffffc90002f9fc08 EFLAGS: 00010293
[  189.458957][ T4199] RAX: ffffffff88dc833f RBX: ffff8880793d0138 RCX: ffff88807b1e5940
[  189.466960][ T4199] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  189.474969][ T4199] RBP: 00000000ffffffff R08: ffff8880793d0013 R09: 1ffff1100f27a002
[  189.482976][ T4199] R10: dffffc0000000000 R11: ffffed100f27a003 R12: dffffc0000000000
[  189.490979][ T4199] R13: dffffc0000000000 R14: ffff8880793d0000 R15: ffff8880793d0010
[  189.498990][ T4199]  ? hci_conn_timeout+0x24f/0x450
[  189.504047][ T4199]  ? hci_conn_timeout+0x24f/0x450
[  189.509123][ T4199]  process_one_work+0x85f/0x1010
[  189.514101][ T4199]  ? worker_detach_from_pool+0x240/0x240
[  189.519758][ T4199]  ? lockdep_hardirqs_off+0x70/0x100
[  189.525063][ T4199]  ? _raw_spin_lock_irq+0xb7/0xf0
[  189.530106][ T4199]  ? _raw_spin_lock_irqsave+0x100/0x100
[  189.535679][ T4199]  ? wq_worker_running+0x97/0x170
[  189.540766][ T4199]  worker_thread+0xaa6/0x1290
[  189.545502][ T4199]  kthread+0x436/0x520
[  189.549593][ T4199]  ? rcu_lock_release+0x20/0x20
[  189.554445][ T4199]  ? kthread_blkcg+0xd0/0xd0
[  189.559054][ T4199]  ret_from_fork+0x1f/0x30
[  189.563524][ T4199]  </TASK>
[  189.566838][ T4199] Kernel Offset: disabled
[  189.571373][ T4199] Rebooting in 86400 seconds..