last executing test programs:

11m9.277564961s ago: executing program 32 (id=1734):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x96ab9c7d55edd554)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600010000004300000038000000c0010000030000000100200002"], 0x78)
close(r0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

8m6.25352734s ago: executing program 33 (id=3508):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x500, 0xfa, 0xffffffff, {0x0, 0x9, 0xfffc, 0x8000, 0x42, 0x400, 0xf5, 0x2, 0x0, 0x1, 0x200, 0x4, 0x6, 0x40000001, "0e19cd0c814fbfcdafd9b5b800dffb381f530000000000004000"}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m56.547153089s ago: executing program 6 (id=4715):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79ad, 0x3180, 0x1, 0x40024e}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x40, 0x0, @fd_index=0x5, 0x0, 0x0, 0xc, 0xc, 0x1})
io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0)

5m56.166255382s ago: executing program 6 (id=4720):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c00000008", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a)

5m55.498775522s ago: executing program 6 (id=4725):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r1 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, &(0x7f0000004300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f0000002140)={&(0x7f0000001580)={0x50, 0x0, 0xffffffffffffffff, {0x7, 0x29, 0x80, 0x508101, 0xc0f7, 0x2, 0x8, 0xa7fff, 0x0, 0x0, 0x80, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)={0x20, 0x0, 0x7, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000005540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005300)={0x1020, 0x0, 0xc, {0x3, 0x0, 0x7, 0x800}}, 0x0})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000008180)={0x0, "5e97461069416b3f42d9b02dc0c4e3bc"})

5m55.097650129s ago: executing program 6 (id=4729):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0)

5m54.723500403s ago: executing program 6 (id=4731):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
sendto$unix(r1, 0x0, 0x0, 0x40000, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e)

5m54.379483978s ago: executing program 6 (id=4734):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r1, 0x0, 0xffffffdb)

5m53.76879383s ago: executing program 34 (id=4734):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r1, 0x0, 0xffffffdb)

2m21.285530893s ago: executing program 1 (id=6726):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x3, 0xff)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)='6', 0x1, 0x0, 0x0, 0x0)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[], 0x14)

2m20.392645778s ago: executing program 1 (id=6730):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x60, 0x2, [@TCA_ROUTE4_ACT={0x5c, 0x6, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfff, 0x5, 0x3, 0x9, 0x7}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014)

2m19.993750236s ago: executing program 1 (id=6743):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x5, "f13b0c65"}, @main=@item_4={0x3, 0x0, 0xb, "660551e4"}, @local=@item_4={0x3, 0x2, 0x9, "4b9d2d98"}]}}, 0x0}, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x3, 0xffffffff, 0x81, 0x7f, 0x21185045, 0xffffffb3})

2m17.739303012s ago: executing program 1 (id=6753):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00')

2m17.351692906s ago: executing program 1 (id=6756):
write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7)
socket(0x10, 0x80003, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0)

2m16.952378269s ago: executing program 1 (id=6759):
r0 = socket(0xf, 0x3, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$key(r0, &(0x7f0000000780)={0x40000000, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)

2m15.994375575s ago: executing program 35 (id=6759):
r0 = socket(0xf, 0x3, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$key(r0, &(0x7f0000000780)={0x40000000, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)

1m23.918309737s ago: executing program 8 (id=7189):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000200)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0})

1m21.438821296s ago: executing program 8 (id=7210):
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xa686fad1d7627434, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x15615, 0xef}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010105}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x4}]}}}]}, 0x40}}, 0x28048810)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120011000000140000006000000003088700fe88a43de1a400000000000000007d01ff0200"/53], 0xfdef)

1m21.108694294s ago: executing program 8 (id=7215):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
socket$kcm(0x10, 0x2, 0x10)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000000780)=""/4076, 0xfec}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f00000006c0)=""/177, 0xb1}], 0x5}, 0x102)

1m20.955070318s ago: executing program 8 (id=7216):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

1m20.783993942s ago: executing program 8 (id=7218):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)})
r0 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

1m20.19977229s ago: executing program 8 (id=7220):
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7, 0x8020, 0x0, 0xfffffffc, {{0x23, 0x4, 0x1, 0x2, 0x8c, 0x64, 0x0, 0xff, 0x4, 0x0, @empty, @remote, {[@timestamp={0x44, 0x18, 0xc, 0x0, 0x6, [0xf6c5, 0x6f46, 0x0, 0x3, 0x9]}, @cipso={0x86, 0x1e, 0x3, [{0x5, 0x5, "cecfa8"}, {0x1, 0x3, '7'}, {0x0, 0x10, "260ba92cea440942a5b32ee00ebc"}]}, @end, @cipso={0x86, 0x25, 0x1, [{0x1, 0xb, "941eff40b2f737c605"}, {0x6, 0x3, "e7"}, {0x1, 0x11, "22a54f8e70a559b9574935d02c9486"}]}, @rr={0x7, 0x1b, 0xe9, [@local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010100, @broadcast]}]}}}}})
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b84954fd5432f"], 0xdd12}], 0x1}, 0x20040890)

1m19.615430475s ago: executing program 36 (id=7220):
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7, 0x8020, 0x0, 0xfffffffc, {{0x23, 0x4, 0x1, 0x2, 0x8c, 0x64, 0x0, 0xff, 0x4, 0x0, @empty, @remote, {[@timestamp={0x44, 0x18, 0xc, 0x0, 0x6, [0xf6c5, 0x6f46, 0x0, 0x3, 0x9]}, @cipso={0x86, 0x1e, 0x3, [{0x5, 0x5, "cecfa8"}, {0x1, 0x3, '7'}, {0x0, 0x10, "260ba92cea440942a5b32ee00ebc"}]}, @end, @cipso={0x86, 0x25, 0x1, [{0x1, 0xb, "941eff40b2f737c605"}, {0x6, 0x3, "e7"}, {0x1, 0x11, "22a54f8e70a559b9574935d02c9486"}]}, @rr={0x7, 0x1b, 0xe9, [@local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010100, @broadcast]}]}}}}})
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b84954fd5432f"], 0xdd12}], 0x1}, 0x20040890)

1m2.345366411s ago: executing program 9 (id=7366):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x143, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"})
r1 = syz_open_pts(r0, 0x141601)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
syz_open_dev$usbfs(0x0, 0x1ff, 0x402)
close_range(r2, 0xffffffffffffffff, 0x0)

1m2.066100498s ago: executing program 9 (id=7369):
r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0)
read$fb(r0, 0x0, 0x0)
write$uinput_user_dev(r0, 0x0, 0x0)
write(r0, &(0x7f0000000200)='S', 0x1)

1m1.558859277s ago: executing program 9 (id=7374):
r0 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x464})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020)

1m0.491117909s ago: executing program 9 (id=7378):
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x4, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x4000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x10248ca4, 0x40, 0x53, 0x0, 0x1, 0x0, 0x0, 0x10, 0x7fffffff}}, 0x50)
mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r2])

1m0.100794875s ago: executing program 9 (id=7379):
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x6f, 0x20, 0x4, 0x3, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"})

59.838884645s ago: executing program 9 (id=7380):
bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)=@x86={0x5, 0x5, 0x2, 0x0, 0x4000003, 0xf8, 0x4, 0x81, 0xfd, 0x8, 0x6, 0xff, 0x0, 0x7, 0x5, 0xfc, 0x3, 0x7, 0xfa, '\x00', 0x0, 0x10000000009})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

59.178685183s ago: executing program 37 (id=7380):
bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)=@x86={0x5, 0x5, 0x2, 0x0, 0x4000003, 0xf8, 0x4, 0x81, 0xfd, 0x8, 0x6, 0xff, 0x0, 0x7, 0x5, 0xfc, 0x3, 0x7, 0xfa, '\x00', 0x0, 0x10000000009})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

40.967879148s ago: executing program 2 (id=7486):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000180))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xb333d00c})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

40.607106221s ago: executing program 2 (id=7489):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffd, 0xffffffff, 0x7fff, 0x0, 0xba71, 0x80, 0x1, 0x5, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000011}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x72b923, 0x80200, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4008000)

35.674476148s ago: executing program 2 (id=7508):
r0 = syz_io_uring_setup(0x35d, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x5, 0x1f5}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r3, &(0x7f0000000040), 0x8)
io_uring_enter(r0, 0x47f2, 0x0, 0x0, 0x0, 0x0)

34.817490708s ago: executing program 2 (id=7513):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

33.737191657s ago: executing program 2 (id=7520):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

33.303032779s ago: executing program 2 (id=7524):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1})
r1 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000540)=0x3)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)

32.621866738s ago: executing program 38 (id=7524):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1})
r1 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000540)=0x3)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)

8.535042124s ago: executing program 5 (id=7694):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xaf}]}}}]}, 0x40}}, 0x0)
sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006", 0x9, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

8.155985807s ago: executing program 5 (id=7696):
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000001e40), 0xb, 0x40000)
pread64(r0, &(0x7f0000002900)=""/40, 0x28, 0x7fff)

7.849145615s ago: executing program 5 (id=7699):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902"], 0x0)
memfd_create(&(0x7f0000000000)='\x01\xfd\xae.+\xa6\x8c\x02\xea\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d  \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\r\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xc4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb<3\xaf\xcb\x8cP\xef\x84\x91\x87\x8b\xb5Z\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\xebR\xc0\xc6\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f?\x00\x00\x00\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xd5\x01\x1b\xd1\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x1b\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa4\x85G\'+\xcc\xbf\r\xa9\x10Klb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fE\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93y\x9d\xc4K mC\x97\x1c\x91\xd7\xf3\x13)`\xfb\xbf\xd3\xcc\x8d\x0e\x1f\x80\x0f\xcag\xd5J\xd7\x99\x02B\xd9\xdb;\xbd\x05\xc8\x9a\xe9(\xb7\xd1\xce\xba\xf8\xc0\x1fPc\x8d\xfceY\xf8j9\xc4\v\xb5\x82\xbaI,\xf5\xbd\a\a\xa2\x83\x99]/@\xbc(*v%\xa1\xd9\xfb\v\xdc\xed\xa3\x93\x16\x0e\xa8\x96\x10\xfc\xae\xc6X@f\x17\xf4\xb78\xa6\n\xaa\xe5m5\x9d\x14\xd7\x91Q\xb5\x11\x88\x89i\x94,]\x91\x13\xa6~O\xcdV\xf36,\x8a\xc9P\xbd\xf6\x16\x99_\x01\x0f0/\xe1Yi\x00=nz\x1d\xbd\xb0\x85W\xeaU\xea\x03)!\xf2\xfa\x04\xecf\xad\xb5\x94\x97\xbb\xae7\xbf\vQpi\xf3x\x80\xf0\xd3B\x17\xbc\xf2H\xeej\xc4\xdd\xb31\xdc\xb3\x19\x12<\xf7\xca\x12\x86\x15kZ\xb4t\x87;\xfb\x97\xc6\xb4\xf5\xa6\x9b-|EW$\x0e\xb2\xef\xebW/\xff`)M\xe3\x99\xe5\xe2M\x8dxD\xbf!\b\xf4o-\xab\xe0\x1eN\xdb\x94x\xe9:\x92#\x80\x91\xc0\x04\xfd}\xd6\xd6\x0f4/\x13\xf2q\xbc&\xd0p\xe6\xe6\x01V\xf3Lc\xfd\"\xa5V\xce\x9b\xd9\xd3\xc2(Q+\xd0\x00\x00\x00\x00\xf9\x17\n\x9bHw\xfb1\x8e\xa0^\xe0\xbd\xfa\xb8\x9f\xb3~\xab\x1c\x85\x85\x91\xa6\xba\xc9\x81\xaa\xfc<\x18\xf0\xb7\xe0\x95,F\x94\x89\x13\xc1\xad\xaeU\x8bb\xbbc\xa1\xb7a5\xf2\"\xb0\xfb\x1c7ZH\x96\xc66\xd5\xe6r\x19\xb4\xd0\x80\'`\x8a\xe9.\a\xa6g\x13\xe5\t\x11', 0x6)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[])

6.092191785s ago: executing program 5 (id=7710):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000b00)={0x40, 0x8, 0x1, "bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)

5.171288418s ago: executing program 0 (id=7717):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78)
r1 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x5556, 0x3d26, 0x22, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101)

4.607123596s ago: executing program 4 (id=7723):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)

4.147320043s ago: executing program 0 (id=7727):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x20000000001005, &(0x7f0000000200)=<r2=>0x0)
sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="a75618c9357220ae979e5e4e", 0xc}, {&(0x7f00000003c0)="b0665a739b", 0x5}], 0x2, 0x0, 0x0, 0x24040004}, 0x24000090)
io_submit(r2, 0x1, &(0x7f0000000740)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000080)='=', 0x1}])

3.635968487s ago: executing program 0 (id=7730):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8004, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x15, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040)

3.424807376s ago: executing program 4 (id=7732):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000200)="66bff6d9c43e27d43c5f389c612e442e5a272a73333a1bb34ed802d58591241cd029ad706a8ab8ec6ef0c6ce36c8135c7532a8d34ecf9aaa3f2f651827015db6d07d537ec0569733a023287d465d5af10a3398cf09992e154bfcce5df24aac6689cbc94f939a2e2f2ed3378253c0af66869a09df092f69c4ca8c0d12ab688a45db491f95c6593a24e65a4d533a6e28531b964a60c1da93eb52d2ad719615e710e34bac645c625ffecf4e055e8a7aa423ba5cb3f2fae30cc4d705cb95b845abdb1bcc2d71f5a9fa6b2f63584ff0bc012eb005c5b15f5ac609ffa2310b0fdbe2fc367b762aec", 0xe5, 0x0, 0x0, 0x0)

3.342320161s ago: executing program 4 (id=7734):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0))
r1 = eventfd2(0x6, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000480)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

3.254054221s ago: executing program 0 (id=7736):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3", 0x2}], 0x2}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/81, 0x51}, {&(0x7f0000000280)=""/96, 0x60}], 0x2}, 0x40002101)
sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)={0xa0, 0x14, 0x400, 0x70bd26, 0x25dfdbfe, {0x2}, [@nested={0x8, 0x36, 0x0, 0x1, [@nested={0x4, 0x93}]}, @nested={0x84, 0xb3, 0x0, 0x1, [@nested={0x80, 0x60, 0x0, 0x1, [@typed={0x8, 0x101, 0x0, 0x0, @fd=r1}, @nested={0x71, 0xda, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @u32=0x28f8}, @generic="a0ab64709b1014b3d6308ad13be70a8bc49275dfe5a1ffdf2bd143dee7742ff5ccb128a32f5bd1d804763bfd8cf08ed5ee7f8127f9dca948986d78ebfbedc8a0bb93dec44f2d858f4695746613b20baceb7c935e09671c5a5a2706a88fedb6779f316ef766"]}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40040c50}, 0x4040080)

3.141127382s ago: executing program 5 (id=7738):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x18, &(0x7f0000000740)={0x40, 0x3, 0x1, 's'}, 0x0, 0x0, 0x0, 0x0})

3.117025083s ago: executing program 4 (id=7739):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x5, 0x0, [{0x9a7, 0x0, 0x100}, {0xb65, 0x0, 0x2}, {0x37d, 0x0, 0x3}, {0x3f6, 0x0, 0x6}, {0x4b564d01, 0x0, 0x200}]})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x140640})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.997476158s ago: executing program 0 (id=7740):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_io_uring_setup(0x24f6, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_LINKAT={0x27, 0x20, 0x0, r3, 0x0, 0x0, r3, 0x1400})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

2.799122266s ago: executing program 0 (id=7742):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="400e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "e302"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="401602"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.756214406s ago: executing program 4 (id=7743):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109021b00010000100009045902019b042a00090582"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x20}, 0x0, 0x0, 0x0, 0x0})

1.759026381s ago: executing program 7 (id=7748):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x1)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000000))

1.640672376s ago: executing program 7 (id=7750):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x48801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x38}}, 0x8000)
sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bf", 0x17, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14)

1.585777631s ago: executing program 3 (id=7751):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0)

1.219548788s ago: executing program 3 (id=7752):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r3=>0x0})
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300200000000000000800000008000300", @ANYRES32=r3, @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x4004844}, 0x0)

1.182774605s ago: executing program 7 (id=7753):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e)
r1 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0)

1.077761713s ago: executing program 7 (id=7754):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280448c, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901)
move_mount(r2, 0x0, r2, 0x0, 0x276)

923.586142ms ago: executing program 3 (id=7755):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYBLOB="02000100"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8)

853.082774ms ago: executing program 7 (id=7756):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x42, &(0x7f0000000100)=<r2=>0x0)
write(r1, &(0x7f0000000400)='`', 0x1)
io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x3f}])

748.417426ms ago: executing program 3 (id=7757):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
close_range(r0, 0xffffffffffffffff, 0x0)

566.607313ms ago: executing program 5 (id=7758):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r2})
dup3(r1, r2, 0x80000)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000})

565.79632ms ago: executing program 7 (id=7759):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/240, 0xf0}], 0x1, 0x133, 0x2)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r2, 0xffffffffffffffff, 0x0)

499.846273ms ago: executing program 3 (id=7760):
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"da19cdbf8ea74337e1c274620e046655", 0x0, 0x0, {0x9, 0x9}, {0x7, 0xf01}, 0x6, [0x5, 0x5, 0xff, 0x0, 0x9, 0x10001, 0x0, 0x5, 0x4bb, 0x72, 0x8, 0x0, 0x6, 0x3800000, 0xfffffffffffffffc, 0xffffffffffffffff]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x1)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24}, {0x10000, 0x5000, 0xb, 0xfc, 0x8, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0xeeee0000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4}, {0x4000, 0x1000, 0x0, 0x3, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0, 0x10}, {0x3000, 0x4000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0xff, 0x6e, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0xb}, {}, 0x9df9ffdf, 0x0, 0x2, 0xa8, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]})

54.814703ms ago: executing program 3 (id=7761):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0)
sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0xe, 0x40880, &(0x7f0000000000)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14)

0s ago: executing program 4 (id=7762):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x42, &(0x7f0000000100)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000240)="b1", 0x1}])
sendmmsg$alg(r1, &(0x7f0000001b80)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="972fd1ebe125a60ab6d6b3fdf725be36", 0x10}], 0x1, 0x0, 0x0, 0x4000}], 0x1, 0x200080d0)

kernel console output (not intermixed with test programs):

k.
[  797.530915][T22193] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[  797.690128][T22193] usb 1-1: Using ep0 maxpacket: 16
[  797.697707][T22193] usb 1-1: config 0 has an invalid interface number: 98 but max is 0
[  797.706560][T22193] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  797.718559][T22193] usb 1-1: config 0 has no interface number 0
[  797.725093][T22193] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  797.735425][T22193] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  797.745895][T22193] usb 1-1: config 0 interface 98 has no altsetting 0
[  797.756027][T22193] usb 1-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  797.765647][T22193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  797.774030][T22193] usb 1-1: Product: syz
[  797.778604][T22193] usb 1-1: Manufacturer: syz
[  797.783585][T22193] usb 1-1: SerialNumber: syz
[  797.792401][T22193] usb 1-1: config 0 descriptor??
[  797.805215][T24822] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  797.814134][T24822] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  798.030477][T24822] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  798.039115][T24822] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  798.675801][T24841] netlink: 'syz.1.6651': attribute type 4 has an invalid length.
[  798.707380][T24841] netlink: 'syz.1.6651': attribute type 4 has an invalid length.
[  798.906123][T24848] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6654'.
[  799.046278][T22182] usb 8-1: USB disconnect, device number 28
[  799.096609][T22193] asix 1-1:0.98 (unnamed net_device) (uninitialized): invalid hw address, using random
[  799.154341][T24856] netlink: 27 bytes leftover after parsing attributes in process `syz.7.6657'.
[  799.308355][T22193] asix 1-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  799.332516][T22193] asix 1-1:0.98 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  799.366040][T22193] asix 1-1:0.98: probe with driver asix failed with error -71
[  799.400990][T22193] usb 1-1: USB disconnect, device number 110
[  800.211358][T24889] bond3: (slave syz_tun): Releasing active interface
[  800.281716][T24889] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  801.020028][ T8696] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[  801.198043][ T8696] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  801.232698][ T8696] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  801.269263][ T8696] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  801.315385][ T8696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  801.341082][T24908] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  801.392334][ T8696] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  801.455913][T24923] all: renamed from bridge_slave_0
[  801.473453][T24925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6685'.
[  801.485031][T24925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6685'.
[  801.498566][T24925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6685'.
[  801.638736][ T8696] usb 1-1: USB disconnect, device number 111
[  801.815814][T24932] bridge_slave_0: left allmulticast mode
[  801.833664][T24932] bridge_slave_0: left promiscuous mode
[  801.843561][T24932] bridge0: port 1(bridge_slave_0) entered disabled state
[  801.859475][T24932] bridge_slave_1: left allmulticast mode
[  801.920891][T24932] bridge_slave_1: left promiscuous mode
[  801.936732][T24932] bridge0: port 2(bridge_slave_1) entered disabled state
[  801.992731][T24932] bond0: (slave bond_slave_0): Releasing backup interface
[  802.019158][T24932] bond0: (slave bond_slave_1): Releasing backup interface
[  802.034614][T24932] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  802.042893][T24932] batman_adv: batadv0: Removing interface: batadv_slave_0
[  802.052796][T24932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  802.060888][T24932] batman_adv: batadv0: Removing interface: batadv_slave_1
[  802.072076][T24932] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  802.420351][T19379] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  802.610013][T19379] usb 2-1: Using ep0 maxpacket: 8
[  802.636060][T19379] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  802.667568][T19379] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[  802.702583][T19379] usb 2-1: config 0 has no interface number 0
[  802.726256][T19379] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 97, changing to 10
[  802.768842][T19379] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 1024
[  802.799489][T19379] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  802.820084][T19379] usb 2-1: config 0 interface 52 has no altsetting 0
[  802.839177][T19379] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[  802.848975][T19379] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34
[  802.866613][T19379] usb 2-1: Product: syz
[  802.892674][T19379] usb 2-1: SerialNumber: syz
[  802.921641][T19379] usb 2-1: config 0 descriptor??
[  803.147735][T19379] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input158
[  803.827588][ T8696] usb 2-1: USB disconnect, device number 100
[  803.827617][    C0] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[  804.068583][T24987] Failed to get privilege flags for destination (handle=0x0:0x0)
[  805.930389][T22182] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  806.125686][T22182] usb 8-1: Using ep0 maxpacket: 32
[  806.174162][T22182] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[  806.205239][T22182] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  806.220397][T22182] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[  806.229469][T22182] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  806.295037][T25028] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6723'.
[  806.312901][T22182] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  806.344186][T22182] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  806.390036][T22182] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  806.413181][T22182] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.446687][T22182] usb 8-1: config 0 descriptor??
[  806.666458][T22182] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  806.720719][T19379] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[  806.899642][T19379] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  806.919082][T19379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  806.931034][T19379] usb 1-1: Product: syz
[  806.940691][T19379] usb 1-1: Manufacturer: syz
[  806.946723][T19379] usb 1-1: SerialNumber: syz
[  807.471275][T19379] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  807.493138][T22182] usb 8-1: USB disconnect, device number 29
[  807.526862][T19379] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  807.561085][T22182] usblp0: removed
[  807.840339][T22193] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  808.014128][T22193] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  808.035628][T22193] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  808.049476][T22193] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  808.064168][T22193] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  808.085981][T22193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  808.105716][T22193] usb 2-1: config 0 descriptor??
[  808.358782][T19379] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO
[  808.372583][T19379] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  808.407446][T19379] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  808.434821][T19379] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  808.490879][T19379] usb 1-1: USB disconnect, device number 112
[  808.585319][T22193] plantronics 0003:047F:FFFF.00A1: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  808.959180][T25067] netlink: 'syz.4.6739': attribute type 4 has an invalid length.
[  809.182054][T22193] usb 2-1: USB disconnect, device number 101
[  810.284677][T25109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6757'.
[  811.293928][T25120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  811.445971][T20452] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  811.474204][T20452] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  811.752547][T20452] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  811.790733][T20452] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  811.866687][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  811.879875][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  811.888877][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  811.904560][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  811.915300][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  812.009195][T20452] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  812.019857][T20452] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  812.158909][T20452] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  812.172719][T20452] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  812.208957][T25136] bridge_slave_0: left allmulticast mode
[  812.214891][T25136] bridge_slave_0: left promiscuous mode
[  812.225902][T25136] bridge0: port 1(bridge_slave_0) entered disabled state
[  812.241521][T25136] bridge_slave_1: left allmulticast mode
[  812.247400][T25136] bridge_slave_1: left promiscuous mode
[  812.253488][T25136] bridge0: port 2(bridge_slave_1) entered disabled state
[  812.269641][T25136] bond0: (slave bond_slave_0): Releasing backup interface
[  812.282915][T25136] bond0: (slave bond_slave_1): Releasing backup interface
[  812.299385][T25136] team0: Port device team_slave_0 removed
[  812.311107][T25136] team0: Port device team_slave_1 removed
[  812.317828][T25136] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  812.326063][T25136] batman_adv: batadv0: Removing interface: batadv_slave_0
[  812.336772][T25136] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  812.345192][T25136] batman_adv: batadv0: Removing interface: batadv_slave_1
[  812.355973][T25136] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  813.231814][T20452] bond0 (unregistering): Released all slaves
[  813.334029][T25159] gre1: entered promiscuous mode
[  813.817737][T25135] chnl_net:caif_netlink_parms(): no params data found
[  813.954960][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  813.961555][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  813.968028][T18890] Bluetooth: hci0: command tx timeout
[  813.988416][T20452] hsr_slave_0: left promiscuous mode
[  814.019870][T20452] hsr_slave_1: left promiscuous mode
[  814.097677][T20452] veth1_macvtap: left promiscuous mode
[  814.103365][T20452] veth0_macvtap: left promiscuous mode
[  814.110735][T20452] veth1_vlan: left promiscuous mode
[  814.116341][T20452] veth0_vlan: left promiscuous mode
[  814.778926][T25195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6781'.
[  815.595016][T25211] netlink: 304 bytes leftover after parsing attributes in process `syz.4.6785'.
[  815.681892][T22182] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  815.850011][T22182] usb 8-1: Using ep0 maxpacket: 16
[  815.865376][T22182] usb 8-1: too many configurations: 123, using maximum allowed: 8
[  815.874840][T22182] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  815.894603][T22182] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  815.906622][T22182] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  815.918542][T22182] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  815.933792][T22182] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  815.954531][T22182] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  815.967293][T22182] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  815.979035][T22182] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  815.991125][T22182] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  816.000748][T22182] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  816.008972][T22182] usb 8-1: SerialNumber: syz
[  816.023633][T22182] usb 8-1: config 0 descriptor??
[  816.031894][T18890] Bluetooth: hci0: command tx timeout
[  816.059246][T22182] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input159
[  816.247060][T25208] input: syz1 as /devices/virtual/input/input160
[  816.273577][ T5181] bcm5974 8-1:0.0: could not read from device
[  816.289382][ T5181] bcm5974 8-1:0.0: could not read from device
[  816.309313][ T5181] bcm5974 8-1:0.0: could not read from device
[  816.325260][ T5181] bcm5974 8-1:0.0: could not read from device
[  816.331888][T22182] usb 8-1: USB disconnect, device number 30
[  816.980991][T25135] bridge0: port 1(bridge_slave_0) entered blocking state
[  816.988292][T25135] bridge0: port 1(bridge_slave_0) entered disabled state
[  817.049202][T25135] bridge_slave_0: entered allmulticast mode
[  817.072615][T25135] bridge_slave_0: entered promiscuous mode
[  817.094727][T25135] bridge0: port 2(bridge_slave_1) entered blocking state
[  817.115802][T25135] bridge0: port 2(bridge_slave_1) entered disabled state
[  817.123947][T25135] bridge_slave_1: entered allmulticast mode
[  817.132199][T25135] bridge_slave_1: entered promiscuous mode
[  817.242404][T25135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  817.267013][T25135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  817.344008][T25135] team0: Port device team_slave_0 added
[  817.363642][T25135] team0: Port device team_slave_1 added
[  817.417453][T25135] batman_adv: batadv0: Adding interface: batadv_slave_0
[  817.427023][T25135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  817.453512][T25135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  817.466938][T25135] batman_adv: batadv0: Adding interface: batadv_slave_1
[  817.480004][T25135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  817.540023][T25135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  817.647544][T25135] hsr_slave_0: entered promiscuous mode
[  817.654591][T25135] hsr_slave_1: entered promiscuous mode
[  817.686805][T25135] debugfs: 'hsr0' already exists in 'hsr'
[  817.699965][T25135] Cannot create hsr debugfs directory
[  817.818381][T25243] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  818.110386][T18890] Bluetooth: hci0: command tx timeout
[  818.286695][T25135] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  818.310303][T25135] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  818.334039][T25135] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  818.356870][T25135] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  818.654945][T25135] 8021q: adding VLAN 0 to HW filter on device bond0
[  818.746709][T25135] 8021q: adding VLAN 0 to HW filter on device team0
[  818.841761][T20452] bridge0: port 1(bridge_slave_0) entered blocking state
[  818.848935][T20452] bridge0: port 1(bridge_slave_0) entered forwarding state
[  818.935732][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state
[  818.943014][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state
[  818.993304][T25281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6799'.
[  819.454643][T25135] 8021q: adding VLAN 0 to HW filter on device batadv0
[  819.573836][T25135] veth0_vlan: entered promiscuous mode
[  819.589506][T25135] veth1_vlan: entered promiscuous mode
[  819.633732][T25135] veth0_macvtap: entered promiscuous mode
[  819.654585][T25135] veth1_macvtap: entered promiscuous mode
[  819.683551][T25135] batman_adv: batadv0: Interface activated: batadv_slave_0
[  819.699207][T25135] batman_adv: batadv0: Interface activated: batadv_slave_1
[  819.717149][T20452] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  819.736301][T20452] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  819.786734][T20452] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  819.833999][T20452] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  819.873299][T20452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  819.891048][T20452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  819.926655][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  819.937419][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  820.136745][T25316] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6817'.
[  820.175580][T25316] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6817'.
[  820.190155][T18890] Bluetooth: hci0: command tx timeout
[  820.212782][T25316] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6817'.
[  821.847044][T25356] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6822'.
[  821.881071][T25356] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6822'.
[  821.909861][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  821.940211][   T30] audit: type=1326 audit(1769321025.150:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25359 comm="syz.7.6823" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x0
[  822.322865][T25365] raw_sendmsg: syz.8.6824 forgot to set AF_INET. Fix it!
[  822.337868][    C1] IPv4: Oversized IP packet from 127.0.0.1
[  822.762357][T22182] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  822.930085][T22182] usb 5-1: Using ep0 maxpacket: 32
[  822.941943][T22182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  822.954444][T22182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  822.966268][T22182] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  822.987633][T22182] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  823.024568][T22182] usb 5-1: config 0 descriptor??
[  823.058648][T22182] hub 5-1:0.0: USB hub found
[  823.283838][T22182] hub 5-1:0.0: 1 port detected
[  823.326582][T25398] loop2: detected capacity change from 0 to 7
[  823.349093][ T5891]  loop2: p4
[  823.360259][ T5891] loop2: partition table partially beyond EOD, truncated
[  823.370328][ T5891] loop2: p4 size 4294967295 extends beyond EOD, truncated
[  823.403732][T25398]  loop2: p4
[  823.407046][T25398] loop2: partition table partially beyond EOD, truncated
[  823.441225][T25398] loop2: p4 size 4294967295 extends beyond EOD, truncated
[  823.551350][ T5891] udevd[5891]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  823.596988][T25405] netlink: 'syz.0.6838': attribute type 10 has an invalid length.
[  823.643624][ T5891] udevd[5891]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  823.878071][  T935] IPVS: starting estimator thread 0...
[  823.901196][T22182] hub 5-1:0.0: activate --> -90
[  823.976689][T25417] IPVS: using max 27 ests per chain, 64800 per kthread
[  824.308201][ T3493] usb 5-1: Failed to suspend device, error -71
[  824.343524][ T6983] usb 5-1: USB disconnect, device number 97
[  825.360613][T22182] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[  825.530014][T22182] usb 1-1: Using ep0 maxpacket: 32
[  825.537657][T22182] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  825.548311][T22182] usb 1-1: config 0 has no interface number 0
[  825.557124][T22182] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  825.575787][T22182] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  825.585579][T22182] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  825.597968][T22182] usb 1-1: Product: syz
[  825.602485][T22182] usb 1-1: Manufacturer: syz
[  825.607458][T22182] usb 1-1: SerialNumber: syz
[  825.622987][T22182] usb 1-1: config 0 descriptor??
[  825.657667][T22182] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  825.696981][T22182] em28xx 1-1:0.132: Video interface 132 found:
[  825.839626][T25490] bridge_slave_1: entered promiscuous mode
[  825.918529][T25492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  826.010130][ T6983] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  826.076541][T22182] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[  826.199975][ T6983] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  826.239974][ T6983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  826.268469][ T6983] usb 5-1: Product: syz
[  826.292468][ T6983] usb 5-1: Manufacturer: syz
[  826.297313][ T6983] usb 5-1: SerialNumber: syz
[  826.503317][T22182] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  826.535840][T22182] em28xx 1-1:0.132: board has no eeprom
[  826.632409][T22182] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  826.646692][T22182] em28xx 1-1:0.132: analog set to bulk mode.
[  826.658293][T19379] em28xx 1-1:0.132: Registering V4L2 extension
[  826.761377][ T6983] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  826.797648][T19379] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  826.809502][T22182] usb 1-1: USB disconnect, device number 113
[  826.822755][   T10] usb 8-1: new full-speed USB device number 31 using dummy_hcd
[  826.835678][ T6983] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  826.850888][T22182] em28xx 1-1:0.132: Disconnecting em28xx
[  826.902655][T25525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6890'.
[  827.014298][   T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  827.043136][T19379] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[  827.060041][   T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  827.078534][T19379] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[  827.122535][T19379] em28xx 1-1:0.132: No AC97 audio processor
[  827.140087][   T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  827.165940][T19379] usb 1-1: Decoder not found
[  827.170763][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  827.178972][T19379] em28xx 1-1:0.132: failed to create media graph
[  827.205717][T19379] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  827.238175][T25531] syzkaller1: entered promiscuous mode
[  827.244613][T19379] em28xx 1-1:0.132: Remote control support is not available for this card.
[  827.253585][T22182] em28xx 1-1:0.132: Closing input extension
[  827.264381][T25531] syzkaller1: entered allmulticast mode
[  827.362130][T22182] em28xx 1-1:0.132: Freeing device
[  827.394074][   T10] usb 8-1: usb_control_msg returned -32
[  827.401944][   T10] usbtmc 8-1:16.0: can't read capabilities
[  827.504417][T25534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6893'.
[  827.690834][ T6983] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO
[  827.728286][ T6983] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  827.761416][ T6983] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  827.777210][ T6983] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  827.799423][ T6983] usb 5-1: USB disconnect, device number 98
[  827.959572][T22182] usb 8-1: USB disconnect, device number 31
[  828.170058][   T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  828.277963][T25553] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6899'.
[  828.290030][ T6983] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[  828.291564][T25553] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6899'.
[  828.320086][   T10] usb 9-1: Using ep0 maxpacket: 32
[  828.329501][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  828.345236][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  828.355592][   T10] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  828.364780][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  828.377719][   T10] usb 9-1: config 0 descriptor??
[  828.456728][   T30] audit: type=1326 audit(1769321031.700:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.4.6900" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf743d539 code=0x0
[  828.479515][ T6983] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  828.494494][ T6983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  828.503065][ T6983] usb 1-1: Product: syz
[  828.507356][ T6983] usb 1-1: Manufacturer: syz
[  828.512755][ T6983] usb 1-1: SerialNumber: syz
[  828.817907][   T10] ft260 0003:0403:6030.00A2: unknown main item tag 0x7
[  828.963584][ T6983] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  828.977275][ T6983] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  829.017080][   T10] ft260 0003:0403:6030.00A2: chip code: 6424 8183
[  829.030063][T19379] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[  829.191831][T19379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  829.217529][T19379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  829.229376][   T10] ft260 0003:0403:6030.00A2: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0
[  829.245504][T19379] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  829.260403][T19379] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  829.269543][T19379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  829.310915][T19379] usb 4-1: config 0 descriptor??
[  829.426540][   T10] ft260 0003:0403:6030.00A2: failed to retrieve status: -32, no wakeup
[  829.642909][   T10] ft260 0003:0403:6030.00A2: failed to reset I2C controller: -71
[  829.699563][   T10] usb 9-1: USB disconnect, device number 2
[  829.775778][T19379] plantronics 0003:047F:FFFF.00A3: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  829.802515][ T6983] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO
[  829.835331][ T6983] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  829.855641][ T6983] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  829.883675][ T6983] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  829.898144][ T6983] usb 1-1: USB disconnect, device number 114
[  830.164381][T25592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6913'.
[  830.175378][T25592] vlan2: left allmulticast mode
[  830.183218][T25592] vlan2: left promiscuous mode
[  830.188918][T25592] bridge0: port 3(vlan2) entered disabled state
[  830.730200][T25609] kvm: Disabled LAPIC found during irq injection
[  831.773217][T19379] usb 4-1: USB disconnect, device number 102
[  832.027017][T25642] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  832.059221][T25642] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  832.392308][T25642] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  832.430429][T25642] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  832.772234][T25659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  833.390004][   T24] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[  833.638035][   T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  833.693745][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  833.740151][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  833.775284][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  833.829475][   T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  833.843598][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  833.863145][   T24] usb 4-1: config 0 descriptor??
[  834.317814][   T24] plantronics 0003:047F:FFFF.00A4: ignoring exceeding usage max
[  834.392755][   T24] plantronics 0003:047F:FFFF.00A4: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  835.277397][T25726] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6955'.
[  835.327528][T25729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6955'.
[  835.455907][T25733] input: syz0 as /devices/virtual/input/input161
[  835.472142][T25734] input: syz0 as /devices/virtual/input/input162
[  836.541732][T19379] usb 4-1: USB disconnect, device number 103
[  837.310167][  T935] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[  837.470167][  T935] usb 1-1: Using ep0 maxpacket: 16
[  837.486150][  T935] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  837.524983][  T935] usb 1-1: config 0 interface 0 has no altsetting 0
[  837.556862][  T935] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  837.593398][  T935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  837.623912][  T935] usb 1-1: config 0 descriptor??
[  837.881670][T25773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6966'.
[  838.153518][  T935] nzxt-smart2 0003:1E71:2009.00A5: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[  838.597946][   T10] usb 1-1: USB disconnect, device number 115
[  839.717981][T25814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6976'.
[  841.480212][T19379] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[  841.560291][   T10] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[  841.630602][T19379] usb 1-1: Using ep0 maxpacket: 32
[  841.641272][T19379] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  841.659951][T19379] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  841.681705][T19379] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  841.700193][T19379] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  841.718954][T19379] usb 1-1: Product: syz
[  841.723319][   T10] usb 4-1: Using ep0 maxpacket: 16
[  841.739213][T19379] usb 1-1: Manufacturer: syz
[  841.745470][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  841.761447][T19379] hub 1-1:4.0: USB hub found
[  841.771667][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  841.786492][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  841.805911][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  841.820072][   T10] usb 4-1: Product: syz
[  841.824325][   T10] usb 4-1: Manufacturer: syz
[  841.830138][ T6983] usb 5-1: new full-speed USB device number 99 using dummy_hcd
[  841.850716][   T10] usb 4-1: SerialNumber: syz
[  841.975253][T19379] hub 1-1:4.0: 2 ports detected
[  842.003785][ T6983] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  842.014796][ T6983] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  842.033548][ T6983] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  842.043256][ T6983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  842.101702][   T10] usb 4-1: 0:2 : does not exist
[  842.124795][   T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  842.160276][   T10] usb 4-1: USB disconnect, device number 104
[  842.221795][ T6037] udevd[6037]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  842.276329][ T6983] usb 5-1: usb_control_msg returned -32
[  842.302968][ T6983] usbtmc 5-1:16.0: can't read capabilities
[  842.389544][T19379] hub 1-1:4.0: set hub depth failed
[  842.424295][T19379] usb 1-1: USB disconnect, device number 116
[  842.513574][T25855] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.6993'.
[  842.523347][T25855] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  842.793436][T25864] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6997'.
[  842.811349][T25864] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6997'.
[  842.823064][T25864] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6997'.
[  842.833786][T25864] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6997'.
[  842.860303][   T24] usb 5-1: USB disconnect, device number 99
[  843.242457][   T30] audit: type=1326 audit(1769321046.490:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25877 comm="syz.7.7003" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f01539 code=0x0
[  843.265913][T25881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7002'.
[  843.276006][T25881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7002'.
[  843.280503][T19379] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[  843.450945][T19379] usb 1-1: Using ep0 maxpacket: 32
[  843.468822][T19379] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  843.488861][T19379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  843.499283][T19379] usb 1-1: Product: syz
[  843.504691][T19379] usb 1-1: Manufacturer: syz
[  843.515722][T19379] usb 1-1: SerialNumber: syz
[  843.531841][T19379] usb 1-1: config 0 descriptor??
[  843.548554][T19379] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  843.768158][T19379] gspca_ov534_9: reg_w failed -71
[  844.042929][T25893] netlink: 76 bytes leftover after parsing attributes in process `syz.8.7007'.
[  844.190282][T19379] gspca_ov534_9: Unknown sensor 0000
[  844.190393][T19379] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22
[  844.251816][T19379] usb 1-1: USB disconnect, device number 117
[  846.061127][ T6983] usb 4-1: new full-speed USB device number 105 using dummy_hcd
[  846.069967][T19379] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[  846.241905][ T6983] usb 4-1: not running at top speed; connect to a high speed hub
[  846.261533][T19379] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  846.274337][ T6983] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  846.293727][T19379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  846.307444][ T6983] usb 4-1: config 1 interface 0 has no altsetting 0
[  846.317950][T19379] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  846.343713][ T6983] usb 4-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40
[  846.355890][T19379] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  846.366831][ T6983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.377504][T19379] usb 1-1: Manufacturer: syz
[  846.397966][ T6983] usb 4-1: Product: syz
[  846.405410][T19379] usb 1-1: config 0 descriptor??
[  846.414472][ T6983] usb 4-1: Manufacturer: syz
[  846.419141][ T6983] usb 4-1: SerialNumber: syz
[  846.613784][T19379] rc_core: IR keymap rc-hauppauge not found
[  846.622712][T19379] Registered IR keymap rc-empty
[  846.663768][T19379] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  846.723613][T19379] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input163
[  846.735652][ T6983] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input164
[  846.761964][ T5181] bcm5974 4-1:1.0: could not read from device
[  846.784730][    C0] igorplugusb 1-1:0.0: Error: urb status = -32
[  846.794414][T25938] bcm5974 4-1:1.0: could not read from device
[  846.809212][ T5181] bcm5974 4-1:1.0: could not read from device
[  846.838466][ T6983] usb 4-1: USB disconnect, device number 105
[  846.873536][ T5181] bcm5974 4-1:1.0: could not read from device
[  846.897038][ T5181] bcm5974 4-1:1.0: could not read from device
[  846.931852][T19379] usb 1-1: USB disconnect, device number 118
[  847.783729][   T24] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[  847.993033][   T24] usb 4-1: Using ep0 maxpacket: 16
[  848.014249][   T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  848.061972][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  848.104662][   T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  848.137242][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  848.173917][   T24] usb 4-1: Product: syz
[  848.197552][   T24] usb 4-1: Manufacturer: syz
[  848.217881][   T24] usb 4-1: SerialNumber: syz
[  848.251142][   T24] usb 4-1: config 0 descriptor??
[  848.278487][   T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  848.329841][   T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  848.740068][ T5912] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[  848.900148][   T24] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  848.922489][ T5912] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  848.941105][   T24] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  848.990587][ T5912] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  849.040272][ T5912] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  849.100064][ T5912] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  849.120469][ T5912] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  849.137421][ T5912] usb 8-1: config 0 descriptor??
[  849.221448][   T24] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  849.241847][   T24] em28xx 4-1:0.0: No AC97 audio processor
[  849.303668][   T24] usb 4-1: USB disconnect, device number 106
[  849.342611][   T24] em28xx 4-1:0.0: Disconnecting em28xx
[  849.380679][   T24] em28xx 4-1:0.0: Freeing device
[  849.598678][ T5912] plantronics 0003:047F:FFFF.00A6: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  851.245766][T26020] FAULT_FLAG_ALLOW_RETRY missing 801
[  851.262409][T26020] CPU: 1 UID: 0 PID: 26020 Comm: syz.0.7055 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  851.262436][T26020] Tainted: [L]=SOFTLOCKUP
[  851.262442][T26020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  851.262458][T26020] Call Trace:
[  851.262465][T26020]  <TASK>
[  851.262472][T26020]  dump_stack_lvl+0xe8/0x150
[  851.262496][T26020]  handle_userfault+0x1539/0x17f0
[  851.262526][T26020]  ? __pfx___folio_put+0x10/0x10
[  851.262545][T26020]  ? __pfx_handle_userfault+0x10/0x10
[  851.262582][T26020]  handle_mm_fault+0x1b8c/0x32a0
[  851.262615][T26020]  ? handle_mm_fault+0xee/0x32a0
[  851.262643][T26020]  ? __pfx_handle_mm_fault+0x10/0x10
[  851.262665][T26020]  ? follow_page_pte+0x825/0x1460
[  851.262693][T26020]  ? __pfx_follow_page_pte+0x10/0x10
[  851.262722][T26020]  __get_user_pages+0x165b/0x29d0
[  851.262764][T26020]  populate_vma_page_range+0x2be/0x3c0
[  851.262787][T26020]  ? __pfx_populate_vma_page_range+0x10/0x10
[  851.262805][T26020]  ? vma_wants_writenotify+0xb3/0x2a0
[  851.262828][T26020]  ? vma_set_page_prot+0xc3/0x100
[  851.262851][T26020]  mprotect_fixup+0x86a/0xa50
[  851.262874][T26020]  ? __pfx_mprotect_fixup+0x10/0x10
[  851.262900][T26020]  do_mprotect_pkey+0x8ab/0xcd0
[  851.262927][T26020]  ? __pfx_do_mprotect_pkey+0x10/0x10
[  851.262954][T26020]  ? __se_sys_futex_time32+0x3ab/0x440
[  851.262986][T26020]  ? rcu_is_watching+0x15/0xb0
[  851.263012][T26020]  __ia32_sys_mprotect+0x7f/0x90
[  851.263030][T26020]  __do_fast_syscall_32+0x1d2/0x540
[  851.263045][T26020]  ? do_fast_syscall_32+0x33/0x70
[  851.263067][T26020]  ? irqentry_exit+0x10e/0x620
[  851.263092][T26020]  do_fast_syscall_32+0x33/0x70
[  851.263115][T26020]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  851.263138][T26020] RIP: 0023:0xf7f53539
[  851.263157][T26020] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  851.263171][T26020] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 000000000000007d
[  851.263188][T26020] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000004000
[  851.263199][T26020] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  851.263208][T26020] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  851.263217][T26020] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  851.263226][T26020] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  851.263248][T26020]  </TASK>
[  851.802020][ T6983] usb 8-1: USB disconnect, device number 32
[  852.271287][T26037] syzkaller1: entered promiscuous mode
[  852.277176][T26037] syzkaller1: entered allmulticast mode
[  853.163503][T26066] gretap0: entered promiscuous mode
[  853.192260][T26066] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7074'.
[  853.207108][T26066] gretap0: left promiscuous mode
[  854.189631][T26093] kvm: vcpu 128: requested 128 ns lapic timer period limited to 200000 ns
[  854.218150][T26093] kvm: vcpu 128: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  854.562462][T26105] netlink: 76 bytes leftover after parsing attributes in process `syz.8.7088'.
[  854.750099][   T24] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  854.930171][   T24] usb 5-1: Using ep0 maxpacket: 32
[  854.953943][   T24] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  854.989969][   T24] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  855.018694][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  855.038546][   T24] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  855.062306][   T24] usb 5-1: Product: syz
[  855.069579][   T24] usb 5-1: Manufacturer: syz
[  855.099347][   T24] hub 5-1:4.0: USB hub found
[  855.319698][   T24] hub 5-1:4.0: 2 ports detected
[  855.435348][T26125] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7097'.
[  855.461331][T26125] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7097'.
[  855.729592][   T24] hub 5-1:4.0: set hub depth failed
[  855.756048][   T24] usb 5-1: USB disconnect, device number 100
[  856.984467][T26184] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7121'.
[  857.102018][   T24] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[  857.281316][   T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  857.295128][   T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  857.309499][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  857.320928][   T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  857.353391][   T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  857.383515][   T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  857.413339][   T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  857.440730][   T24] usb 5-1: Product: syz
[  857.450134][ T5912] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  857.458294][   T24] usb 5-1: Manufacturer: syz
[  857.490879][   T24] cdc_wdm 5-1:1.0: skipping garbage
[  857.499975][   T24] cdc_wdm 5-1:1.0: skipping garbage
[  857.512020][   T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  857.517987][   T24] cdc_wdm 5-1:1.0: Unknown control protocol
[  857.614920][ T5912] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  857.632018][ T5912] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  857.642829][ T5912] usb 9-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  857.672318][ T5912] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  857.692961][ T5912] usb 9-1: config 0 descriptor??
[  857.755482][ T6983] usb 5-1: USB disconnect, device number 101
[  858.096165][T26209] fuse: root generation should be zero
[  858.186327][ T5912] logitech 0003:046D:CA04.00A7: unknown main item tag 0x0
[  858.202509][ T5912] logitech 0003:046D:CA04.00A7: unknown main item tag 0x0
[  858.222345][ T5912] logitech 0003:046D:CA04.00A7: unknown main item tag 0x0
[  858.229648][ T5912] logitech 0003:046D:CA04.00A7: unknown main item tag 0x0
[  858.249307][ T5912] logitech 0003:046D:CA04.00A7: unknown main item tag 0x0
[  858.272675][ T5912] logitech 0003:046D:CA04.00A7: unknown main item tag 0x0
[  858.293385][ T5912] logitech 0003:046D:CA04.00A7: unknown main item tag 0x0
[  858.333259][ T5912] logitech 0003:046D:CA04.00A7: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.8-1/input0
[  858.392302][ T5912] logitech 0003:046D:CA04.00A7: no inputs found
[  858.686421][  T796] usb 9-1: USB disconnect, device number 3
[  859.450698][T26252] netlink: 76 bytes leftover after parsing attributes in process `syz.8.7145'.
[  859.476328][T26252] netlink: 108 bytes leftover after parsing attributes in process `syz.8.7145'.
[  859.509942][T26252] netlink: 108 bytes leftover after parsing attributes in process `syz.8.7145'.
[  859.610038][ T5912] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[  859.792165][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  859.837218][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  859.875857][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  859.924314][ T5912] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  859.943496][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  859.964039][ T5912] usb 4-1: config 0 descriptor??
[  860.314621][ T6983] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0
[  860.335435][ T6983] hid-generic 0000:0000:0000.00A8: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  860.435037][ T5912] plantronics 0003:047F:FFFF.00A9: unknown main item tag 0x0
[  860.462920][ T5912] plantronics 0003:047F:FFFF.00A9: unknown main item tag 0x0
[  860.506904][ T5912] plantronics 0003:047F:FFFF.00A9: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  860.763068][  T796] usb 4-1: USB disconnect, device number 107
[  861.240409][  T796] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[  861.412982][  T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  861.452674][  T796] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  861.476539][  T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  861.510056][  T796] usb 5-1: config 0 descriptor??
[  861.747147][  T796] usbhid 5-1:0.0: can't add hid device: -71
[  861.785490][  T796] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  861.871160][  T796] usb 5-1: USB disconnect, device number 102
[  861.961111][T26297] tipc: Failed to remove unknown binding: 66,1,1/2886997043:1773478932/1773478934
[  861.991039][T26297] tipc: Failed to remove unknown binding: 66,1,1/2886997043:1773478932/1773478934
[  862.059490][T26301] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96
[  862.243000][T26307] loop5: detected capacity change from 0 to 7
[  862.290981][  T796] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[  862.300549][T26307] Dev loop5: unable to read RDB block 7
[  862.307951][T26307]  loop5: AHDI p1 p2 p3
[  862.333751][T26307] loop5: partition table partially beyond EOD, truncated
[  862.365416][T26307] loop5: p1 start 1818582900 is beyond EOD, truncated
[  862.372961][T26307] loop5: p3 start 335544320 is beyond EOD, truncated
[  862.470406][  T796] usb 5-1: Using ep0 maxpacket: 32
[  862.477477][  T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  862.524948][  T796] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  862.560055][  T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  862.589185][T26317] tipc: Failed to remove unknown binding: 66,1,1/0:242315263/242315265
[  862.607067][  T796] usb 5-1: config 0 descriptor??
[  862.671881][  T796] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  862.710384][  T796] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  862.967858][T26331] ÿ: renamed from bond_slave_0 (while UP)
[  863.075470][T26284] ldusb 5-1:0.0: Read buffer overflow, 316 bytes dropped
[  863.090120][T19379] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[  863.124532][  T796] usb 5-1: USB disconnect, device number 103
[  863.149532][  T796] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  863.274225][T19379] usb 8-1: Using ep0 maxpacket: 32
[  863.294904][T19379] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  863.325730][T19379] usb 8-1: config 0 has no interface number 0
[  863.349567][T19379] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  863.363083][T19379] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.374053][T19379] usb 8-1: Product: syz
[  863.378302][T19379] usb 8-1: Manufacturer: syz
[  863.384913][T19379] usb 8-1: SerialNumber: syz
[  863.393017][T19379] usb 8-1: config 0 descriptor??
[  863.407503][T19379] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  863.422054][T19379] usb 8-1: selecting invalid altsetting 1
[  863.427994][T19379] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  863.449783][T19379] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  863.461771][T19379] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  863.471784][T19379] usb 8-1: media controller created
[  863.499775][T19379] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  863.632299][T19379] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  863.660235][T19379] zl10353_read_register: readreg error (reg=127, ret==-71)
[  863.691160][T19379] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  863.796847][T19379] usb 8-1: USB disconnect, device number 33
[  863.952264][  T796] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  864.110240][  T796] usb 9-1: Using ep0 maxpacket: 16
[  864.120826][  T796] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  864.134171][  T796] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  864.148432][  T796] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.157288][  T796] usb 9-1: Product: syz
[  864.161852][  T796] usb 9-1: Manufacturer: syz
[  864.166583][  T796] usb 9-1: SerialNumber: syz
[  864.175555][  T796] usb 9-1: config 0 descriptor??
[  864.190845][  T796] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  864.202095][  T796] em28xx 9-1:0.0: DVB interface 0 found: bulk
[  864.472210][T26376] binder: 26374:26376 ioctl c0306201 0 returned -14
[  864.782876][T19379] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[  864.802118][  T796] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[  864.911155][T26384] netlink: 'syz.0.7202': attribute type 1 has an invalid length.
[  864.950293][T19379] usb 4-1: Using ep0 maxpacket: 16
[  864.969097][T19379] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  864.982432][T26384] bond3: (slave bridge2): making interface the new active one
[  864.986498][T19379] usb 4-1: config 1 has no interface number 1
[  864.995508][T26384] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  865.004744][T19379] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  865.033212][T19379] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  865.075588][T19379] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  865.109830][T19379] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  865.129729][T19379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  865.154730][T19379] usb 4-1: Product: syz
[  865.167780][T19379] usb 4-1: Manufacturer: syz
[  865.177593][T19379] usb 4-1: SerialNumber: syz
[  865.438243][  T796] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  865.480713][  T796] em28xx 9-1:0.0: board has no eeprom
[  865.579992][  T796] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  865.588036][  T796] em28xx 9-1:0.0: dvb set to bulk mode.
[  865.611204][   T10] em28xx 9-1:0.0: Binding DVB extension
[  865.641813][  T796] usb 9-1: USB disconnect, device number 4
[  865.649439][  T796] em28xx 9-1:0.0: Disconnecting em28xx
[  865.668794][T19379] usb 4-1: 2:1 : format type 0 is detected, processed as PCM
[  865.747517][   T10] em28xx 9-1:0.0: Registering input extension
[  865.761539][  T796] em28xx 9-1:0.0: Closing input extension
[  865.824072][  T796] em28xx 9-1:0.0: Freeing device
[  866.209713][T26410] syzkaller1: entered promiscuous mode
[  866.226956][T26410] syzkaller1: entered allmulticast mode
[  866.505787][T19379] usb 4-1: current rate 772 is different from the runtime rate 9338507
[  866.770297][T19379] usb 4-1: USB disconnect, device number 108
[  866.901283][ T6062] udevd[6062]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  867.464837][   T60] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.646573][   T60] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.798839][   T60] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.998318][T26429] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  868.004847][   T60] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  868.143953][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  868.166328][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  868.178700][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  868.187200][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  868.210288][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  868.220405][   T30] audit: type=1326 audit(1769321071.460:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26438 comm="syz.0.7226" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f53539 code=0x0
[  868.295614][T18890] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  868.311980][T18890] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  868.319500][T18890] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  868.327847][T18890] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  868.335712][T18890] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  868.966928][   T60] bridge_slave_1: left allmulticast mode
[  868.981822][   T60] bridge_slave_1: left promiscuous mode
[  868.998205][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  869.101348][   T60] bridge_slave_0: left allmulticast mode
[  869.107072][   T60] bridge_slave_0: left promiscuous mode
[  869.180301][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  869.958791][   T24] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[  870.131850][   T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  870.140906][   T24] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  870.171083][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  870.191261][   T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  870.211406][   T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  870.233511][   T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  870.243021][   T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  870.251402][   T24] usb 1-1: Product: syz
[  870.255749][   T24] usb 1-1: Manufacturer: syz
[  870.281205][   T24] cdc_wdm 1-1:1.0: skipping garbage
[  870.287705][   T24] cdc_wdm 1-1:1.0: skipping garbage
[  870.300960][   T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  870.306931][   T24] cdc_wdm 1-1:1.0: Unknown control protocol
[  870.368446][T18890] Bluetooth: hci0: command tx timeout
[  870.523772][   T60] bond0 (unregistering): (slave 
c
1ÿ): Releasing backup interface
[  870.535274][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  870.547501][   T60] bond0 (unregistering): Released all slaves
[  870.803186][    C1] cdc_wdm 1-1:1.0: Unexpected error -71
[  870.808927][    C1] wdm_int_callback: 7489 callbacks suppressed
[  870.808955][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  870.821721][    C1] wdm_int_callback: 7489 callbacks suppressed
[  870.821750][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  870.834989][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  870.841646][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  870.848037][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  870.854862][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  870.861406][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  870.868307][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  870.874934][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  870.881592][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  870.887913][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  870.894553][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  870.901031][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  870.907677][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  870.914146][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  870.914504][T26443] chnl_net:caif_netlink_parms(): no params data found
[  870.920795][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  870.921274][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  870.940616][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  870.947973][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  870.954780][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  870.963469][ T8696] usb 1-1: USB disconnect, device number 119
[  870.969577][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  871.187816][   T60] hsr_slave_0: left promiscuous mode
[  871.194774][   T60] hsr_slave_1: left promiscuous mode
[  871.205108][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  871.215117][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  871.225230][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  871.233254][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  871.263791][   T60] veth1_macvtap: left promiscuous mode
[  871.269519][   T60] veth0_macvtap: left promiscuous mode
[  871.275410][   T60] veth1_vlan: left promiscuous mode
[  871.281303][   T60] veth0_vlan: left promiscuous mode
[  872.049749][   T60] team0 (unregistering): Port device team_slave_1 removed
[  872.100979][   T60] team0 (unregistering): Port device team_slave_0 removed
[  872.437815][T18890] Bluetooth: hci0: command tx timeout
[  872.603694][T26443] bridge0: port 1(bridge_slave_0) entered blocking state
[  872.611128][T26443] bridge0: port 1(bridge_slave_0) entered disabled state
[  872.618366][T26443] bridge_slave_0: entered allmulticast mode
[  872.626507][T26443] bridge_slave_0: entered promiscuous mode
[  872.636341][T26443] bridge0: port 2(bridge_slave_1) entered blocking state
[  872.643612][T26443] bridge0: port 2(bridge_slave_1) entered disabled state
[  872.650939][T26443] bridge_slave_1: entered allmulticast mode
[  872.658892][T26443] bridge_slave_1: entered promiscuous mode
[  872.718844][T26443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  872.744593][T26443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  872.781443][T26443] team0: Port device team_slave_0 added
[  872.792580][T26443] team0: Port device team_slave_1 added
[  872.854647][T26443] batman_adv: batadv0: Adding interface: batadv_slave_0
[  872.861796][T26443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  872.888740][T26443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  872.902159][T26443] batman_adv: batadv0: Adding interface: batadv_slave_1
[  872.909200][T26443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  872.936120][T26443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  873.068362][T26443] hsr_slave_0: entered promiscuous mode
[  873.076798][T26443] hsr_slave_1: entered promiscuous mode
[  873.083823][T26443] debugfs: 'hsr0' already exists in 'hsr'
[  873.089606][T26443] Cannot create hsr debugfs directory
[  873.487241][T26443] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  873.500899][T26443] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  873.511697][T26443] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  873.522120][T26443] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  873.619064][T26443] 8021q: adding VLAN 0 to HW filter on device bond0
[  873.665432][T26443] 8021q: adding VLAN 0 to HW filter on device team0
[  873.679268][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  873.686558][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  873.705824][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state
[  873.715869][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state
[  873.825549][T26443] 8021q: adding VLAN 0 to HW filter on device batadv0
[  873.892044][T26443] veth0_vlan: entered promiscuous mode
[  873.906424][T26443] veth1_vlan: entered promiscuous mode
[  873.955277][T26443] veth0_macvtap: entered promiscuous mode
[  873.966501][T26443] veth1_macvtap: entered promiscuous mode
[  873.994539][T26443] batman_adv: batadv0: Interface activated: batadv_slave_0
[  874.015631][T26443] batman_adv: batadv0: Interface activated: batadv_slave_1
[  874.042296][ T3452] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  874.062064][ T3452] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  874.072194][ T3452] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  874.089179][ T3452] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  874.184743][ T3452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  874.210473][ T3452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  874.254216][ T3452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  874.263272][ T3452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  874.475464][T26556] binder: 26553:26556 ioctl c0306201 80000640 returned -22
[  874.519214][T18890] Bluetooth: hci0: command tx timeout
[  875.404386][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  875.414045][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  875.756769][T26592] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.7247'.
[  875.994026][T26597] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  876.590680][T18890] Bluetooth: hci0: command tx timeout
[  876.725406][T26619] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7263'.
[  876.848360][T26623] syzkaller1: entered promiscuous mode
[  876.854289][T26623] syzkaller1: entered allmulticast mode
[  877.060046][   T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  877.190159][  T935] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[  877.220187][   T10] usb 10-1: Using ep0 maxpacket: 8
[  877.231537][   T10] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  877.240983][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  877.249160][   T10] usb 10-1: Product: syz
[  877.254567][   T10] usb 10-1: Manufacturer: syz
[  877.260202][   T10] usb 10-1: SerialNumber: syz
[  877.270440][ T8695] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[  877.276363][   T10] usb 10-1: config 0 descriptor??
[  877.360384][  T935] usb 4-1: Using ep0 maxpacket: 8
[  877.371739][  T935] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13
[  877.404927][  T935] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  877.420411][  T935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  877.428474][  T935] usb 4-1: Product: syz
[  877.433400][ T8695] usb 5-1: Using ep0 maxpacket: 32
[  877.439449][  T935] usb 4-1: Manufacturer: syz
[  877.447199][  T935] usb 4-1: SerialNumber: syz
[  877.454686][ T8695] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  877.466750][ T8695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  877.476888][  T935] usb 4-1: config 0 descriptor??
[  877.493063][ T8695] usb 5-1: Product: syz
[  877.499611][ T8695] usb 5-1: Manufacturer: syz
[  877.511801][  T935] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  877.514765][   T10] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  877.519261][ T8695] usb 5-1: SerialNumber: syz
[  877.541060][ T8695] usb 5-1: config 0 descriptor??
[  877.564450][ T8695] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  878.530201][   T10] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  878.579319][   T10] usb 10-1: USB disconnect, device number 2
[  878.746243][  T935] gspca_zc3xx: reg_w_i err -71
[  879.006435][ T8695] gspca_topro: reg_r err -71
[  879.012947][ T8695] gspca_topro: Sensor soi763a
[  879.044894][ T8695] usb 5-1: USB disconnect, device number 104
[  879.370361][  T935] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  879.376759][  T935] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  879.432304][  T935] usb 4-1: USB disconnect, device number 109
[  879.788946][T26687] gtp0: entered promiscuous mode
[  880.050038][T26701] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  880.116864][T26698] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7294'.
[  880.134202][T26698] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7294'.
[  880.510574][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  880.985382][  T935] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[  881.161429][  T935] usb 5-1: Using ep0 maxpacket: 32
[  881.185254][  T935] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  881.211069][  T935] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  881.233955][  T935] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  881.270053][  T935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  881.300010][  T935] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  881.340132][  T935] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  881.387469][  T935] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  881.409554][  T935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  881.428482][  T935] usb 5-1: config 0 descriptor??
[  881.574523][T26752] loop6: detected capacity change from 0 to 7
[  881.590390][T26752] Dev loop6: unable to read RDB block 7
[  881.600267][T26752]  loop6: unable to read partition table
[  881.606550][T26752] loop6: partition table beyond EOD, truncated
[  881.619278][T26752] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  881.662950][  T935] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 105 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  881.901831][  T796] usb 5-1: USB disconnect, device number 105
[  881.936880][  T796] usblp0: removed
[  882.197005][T26771] netlink: 'syz.3.7325': attribute type 10 has an invalid length.
[  883.580396][T26815] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7343'.
[  883.614695][T26815] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7343'.
[  883.643802][T26815] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7343'.
[  883.955258][T26828] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7349'.
[  884.485552][T26845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7355'.
[  884.496229][T26845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7355'.
[  884.506428][T26845] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7355'.
[  884.516958][T26845] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7355'.
[  885.010831][   T10] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[  885.043787][T26867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7363'.
[  885.169994][   T10] usb 8-1: Using ep0 maxpacket: 32
[  885.191748][   T10] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[  885.228444][   T10] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  885.248346][   T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[  885.268785][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  885.287069][   T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  885.300632][   T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  885.315159][   T10] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  885.328080][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  885.389496][   T10] usb 8-1: config 0 descriptor??
[  885.676446][   T10] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  885.735847][   T10] usb 8-1: USB disconnect, device number 34
[  885.762811][   T10] usblp0: removed
[  885.840022][ T8695] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[  886.052589][ T8695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  886.073178][ T8695] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  886.089746][ T8695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  886.108491][ T8695] usb 5-1: config 0 descriptor??
[  886.239980][   T10] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[  886.399971][   T10] usb 8-1: Using ep0 maxpacket: 32
[  886.410746][T26911] loop6: detected capacity change from 0 to 7
[  886.413407][   T10] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[  886.436715][ T5891] Dev loop6: unable to read RDB block 7
[  886.448480][   T10] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  886.453726][ T5891]  loop6: unable to read partition table
[  886.479694][ T5891] loop6: partition table beyond EOD, truncated
[  886.498463][   T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[  886.531106][T26911] Dev loop6: unable to read RDB block 7
[  886.541254][T26911]  loop6: unable to read partition table
[  886.543031][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  886.571369][T26911] loop6: partition table beyond EOD, truncated
[  886.588034][   T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  886.618041][T26911] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  886.627916][ T8695] lenovo 0003:17EF:6047.00AA: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0
[  886.639844][   T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  886.717498][   T10] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  886.770409][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  886.833361][   T10] usb 8-1: config 0 descriptor??
[  887.048633][   T10] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  887.275310][   T10] usb 8-1: USB disconnect, device number 35
[  887.314470][   T10] usblp0: removed
[  887.638023][ T8695] usb 5-1: USB disconnect, device number 106
[  887.905128][ T6251] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  888.095643][ T6251] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  888.265582][ T6251] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  888.543836][ T6251] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  888.599363][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  888.622369][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  888.636907][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  888.651933][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  888.659813][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  888.777663][T26957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7387'.
[  888.817261][T26960] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.7389'.
[  888.884747][T26963] ALSA: seq fatal error: cannot create timer (-22)
[  889.512504][ T6251] bridge_slave_1: left allmulticast mode
[  889.531311][ T6251] bridge_slave_1: left promiscuous mode
[  889.537158][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state
[  889.597039][ T6251] bridge_slave_0: left allmulticast mode
[  889.636415][ T6251] bridge_slave_0: left promiscuous mode
[  889.652695][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state
[  890.177238][   T30] audit: type=1326 audit(1769321093.420:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27007 comm="syz.3.7402" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x0
[  890.605351][ T6251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  890.616723][ T6251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  890.628353][ T6251] bond0 (unregistering): Released all slaves
[  890.634558][T22149] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[  890.750142][T18890] Bluetooth: hci0: command tx timeout
[  890.802028][T22149] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  890.827298][T22149] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  890.869773][T22149] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  890.879825][T22149] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  890.896435][T22149] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  890.914113][T22149] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  890.922789][T22149] usb 8-1: Manufacturer: syz
[  890.948894][T26955] chnl_net:caif_netlink_parms(): no params data found
[  890.960303][T22149] usb 8-1: config 0 descriptor??
[  891.402181][ T6251] hsr_slave_0: left promiscuous mode
[  891.414483][ T6251] hsr_slave_1: left promiscuous mode
[  891.427054][ T6251] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  891.435680][ T6251] batman_adv: batadv0: Removing interface: batadv_slave_0
[  891.456503][ T6251] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  891.478268][ T6251] batman_adv: batadv0: Removing interface: batadv_slave_1
[  891.485454][T22149] appleir 0003:05AC:8243.00AB: item fetching failed at offset 0/1
[  891.487011][T22149] appleir 0003:05AC:8243.00AB: parse failed
[  891.514320][T22149] appleir 0003:05AC:8243.00AB: probe with driver appleir failed with error -22
[  891.572266][ T6251] veth1_macvtap: left promiscuous mode
[  891.579507][ T6251] veth0_macvtap: left promiscuous mode
[  891.585823][ T6251] veth1_vlan: left promiscuous mode
[  891.598724][ T6251] veth0_vlan: left promiscuous mode
[  891.650241][ T8696] usb 4-1: new full-speed USB device number 110 using dummy_hcd
[  891.733798][T22149] usb 8-1: USB disconnect, device number 36
[  891.823734][ T8696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  891.845325][ T8696] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  891.866641][ T8696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  891.897654][ T8696] usb 4-1: config 0 descriptor??
[  891.918423][T27038] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  892.385509][ T8696] usbhid 4-1:0.0: can't add hid device: -71
[  892.405424][ T8696] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  892.426976][ T8696] usb 4-1: USB disconnect, device number 110
[  892.747886][ T6251] team0 (unregistering): Port device team_slave_1 removed
[  892.804915][ T6251] team0 (unregistering): Port device team_slave_0 removed
[  892.840341][T18890] Bluetooth: hci0: command tx timeout
[  893.585051][T26955] bridge0: port 1(bridge_slave_0) entered blocking state
[  893.599613][T26955] bridge0: port 1(bridge_slave_0) entered disabled state
[  893.607677][T26955] bridge_slave_0: entered allmulticast mode
[  893.615661][T26955] bridge_slave_0: entered promiscuous mode
[  893.624665][T26955] bridge0: port 2(bridge_slave_1) entered blocking state
[  893.632209][T26955] bridge0: port 2(bridge_slave_1) entered disabled state
[  893.639587][T26955] bridge_slave_1: entered allmulticast mode
[  893.649283][T26955] bridge_slave_1: entered promiscuous mode
[  893.727295][T26955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  893.747626][T26955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  893.801147][T26955] team0: Port device team_slave_0 added
[  893.811921][T26955] team0: Port device team_slave_1 added
[  893.852872][T26955] batman_adv: batadv0: Adding interface: batadv_slave_0
[  893.870747][T26955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  893.902534][T26955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  893.918398][T26955] batman_adv: batadv0: Adding interface: batadv_slave_1
[  893.925735][T26955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  893.959175][T26955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  894.111736][T26955] hsr_slave_0: entered promiscuous mode
[  894.118547][T26955] hsr_slave_1: entered promiscuous mode
[  894.139314][T26955] debugfs: 'hsr0' already exists in 'hsr'
[  894.145188][T26955] Cannot create hsr debugfs directory
[  894.813889][T26955] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  894.826040][T26955] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  894.842829][T26955] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  894.855626][T26955] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  894.910115][T18890] Bluetooth: hci0: command tx timeout
[  894.993156][T26955] 8021q: adding VLAN 0 to HW filter on device bond0
[  895.024469][T26955] 8021q: adding VLAN 0 to HW filter on device team0
[  895.041683][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state
[  895.048907][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state
[  895.074499][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state
[  895.081756][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state
[  895.171395][T26955] 8021q: adding VLAN 0 to HW filter on device batadv0
[  895.234886][T26955] veth0_vlan: entered promiscuous mode
[  895.252360][T26955] veth1_vlan: entered promiscuous mode
[  895.295624][T26955] veth0_macvtap: entered promiscuous mode
[  895.307672][T26955] veth1_macvtap: entered promiscuous mode
[  895.339550][T26955] batman_adv: batadv0: Interface activated: batadv_slave_0
[  895.359049][T26955] batman_adv: batadv0: Interface activated: batadv_slave_1
[  895.379101][ T6244] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  895.401780][ T6244] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  895.419263][ T6244] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  895.476993][ T6244] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  895.526672][ T6244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  895.546399][ T6244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  895.589423][ T6251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  895.598134][ T6251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  895.740157][T27106] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7423'.
[  895.990040][T22182] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[  896.172300][T22182] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  896.202368][T22182] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  896.240695][T22182] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  896.294806][T22182] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  896.375176][T22182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  896.437410][T22182] usb 1-1: config 0 descriptor??
[  896.963586][T22182] plantronics 0003:047F:FFFF.00AC: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  896.990224][T18890] Bluetooth: hci0: command tx timeout
[  897.148197][T27137] binder: 27136:27137 ioctl c0306201 80000140 returned -14
[  897.531809][    C0] plantronics 0003:047F:FFFF.00AC: hid_field_extract() called with n (132) > 32! (dhcpcd-run-hook)
[  897.745192][T22182] usb 1-1: USB disconnect, device number 120
[  898.492128][T27157] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  898.902940][T27171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7429'.
[  898.978354][T27174] batman_adv: batadv0: Adding interface: dummy0
[  898.978376][T27174] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  898.978409][T27174] batman_adv: batadv0: Interface activated: dummy0
[  899.083002][T27174] batadv0: mtu less than device minimum
[  899.084605][T27174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  899.086184][T27174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  899.087676][T27174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  899.089194][T27174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  899.090764][T27174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  899.092277][T27174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  899.093841][T27174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  899.095337][T27174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  899.096839][T27174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  900.649992][T22096] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[  900.842747][T22096] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  900.900162][T22096] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  900.969896][T22096] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  901.040882][T22096] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  901.090060][T22096] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  901.151525][T22096] usb 5-1: config 0 descriptor??
[  901.522012][T27224] netlink: 7 bytes leftover after parsing attributes in process `syz.7.7446'.
[  901.569381][T27224] netlink: 7 bytes leftover after parsing attributes in process `syz.7.7446'.
[  901.654210][T22096] plantronics 0003:047F:FFFF.00AD: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  903.611908][T27289] netlink: 428 bytes leftover after parsing attributes in process `syz.4.7462'.
[  903.622390][   T10] usb 1-1: new full-speed USB device number 121 using dummy_hcd
[  903.681983][T22182] usb 5-1: USB disconnect, device number 107
[  903.793592][   T10] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[  903.840150][   T10] usb 1-1: config 1 has no interface number 0
[  903.861821][   T10] usb 1-1: config 1 interface 105 has no altsetting 0
[  903.892038][   T10] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  903.941017][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  903.949090][   T10] usb 1-1: Product: syz
[  903.976350][   T10] usb 1-1: Manufacturer: syz
[  903.993953][   T10] usb 1-1: SerialNumber: syz
[  904.027133][T27305] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7467'.
[  904.052332][T27305] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7467'.
[  904.080351][T22182] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[  904.162908][T27310] netlink: 'syz.7.7470': attribute type 2 has an invalid length.
[  904.241334][T22182] usb 4-1: Using ep0 maxpacket: 32
[  904.262809][T22182] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  904.293890][T22182] usb 4-1: config 0 has no interface number 0
[  904.302266][T22182] usb 4-1: config 0 interface 184 has no altsetting 0
[  904.326107][T22182] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  904.346426][T22182] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  904.369721][T22182] usb 4-1: Product: syz
[  904.388840][T22182] usb 4-1: Manufacturer: syz
[  904.406635][T22182] usb 4-1: SerialNumber: syz
[  904.426973][T22182] usb 4-1: config 0 descriptor??
[  904.458351][T22182] smsc75xx v1.0.0
[  904.866610][   T10] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  904.923724][   T10] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  904.994742][   T10] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, de:fd:a4:2d:3e:50
[  905.330308][   T10] usb 1-1: USB disconnect, device number 121
[  905.392729][   T10] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  905.469691][T27333] batman_adv: batadv0: Adding interface: dummy0
[  905.491130][T27333] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  905.517248][   T10] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  905.530336][   T10] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  905.551281][T27333] batman_adv: batadv0: Interface activated: dummy0
[  905.558541][   T10] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  905.603534][T27337] net_ratelimit: 10 callbacks suppressed
[  905.603579][T27337] batadv0: mtu less than device minimum
[  905.620290][T27337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  905.632763][T27337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  905.644776][T27337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  905.656692][T27337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  905.668568][T27337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  905.680498][T27337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  905.692368][T27337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  905.704252][T27337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  905.716087][T27337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  905.952189][T22182] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[  905.966820][T22182] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  906.000415][T22182] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  906.036005][T22182] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  906.089981][T22182] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  906.134924][T22182] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  906.195440][T22182] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  906.257312][T22182] usb 4-1: USB disconnect, device number 111
[  906.529151][   T30] audit: type=1326 audit(1769321109.770:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27361 comm="syz.4.7483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[  906.591010][   T30] audit: type=1326 audit(1769321109.800:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27361 comm="syz.4.7483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[  906.721757][   T30] audit: type=1326 audit(1769321109.810:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27361 comm="syz.4.7483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf743d539 code=0x7ffc0000
[  906.764633][   T30] audit: type=1326 audit(1769321109.810:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27361 comm="syz.4.7483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[  906.790353][   T30] audit: type=1326 audit(1769321109.810:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27361 comm="syz.4.7483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[  906.814433][   T30] audit: type=1326 audit(1769321109.810:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27361 comm="syz.4.7483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf743d539 code=0x7ffc0000
[  906.858235][   T30] audit: type=1326 audit(1769321109.810:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27361 comm="syz.4.7483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[  906.913025][T27374] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7487'.
[  906.960070][   T30] audit: type=1326 audit(1769321109.810:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27361 comm="syz.4.7483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[  907.018171][   T30] audit: type=1326 audit(1769321109.810:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27361 comm="syz.4.7483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf743d539 code=0x7ffc0000
[  907.042143][   T30] audit: type=1326 audit(1769321109.810:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27361 comm="syz.4.7483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000
[  908.260471][T22096] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[  908.433750][T22096] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  908.483151][T22096] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  908.493567][T22096] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  908.510219][T22096] usb 1-1: Product: syz
[  908.540002][T22096] usb 1-1: Manufacturer: syz
[  908.544685][T22096] usb 1-1: SerialNumber: syz
[  909.617505][T22096] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  909.634809][T22096] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  909.643704][T22096] cdc_ncm 1-1:1.0: setting rx_max = 2048
[  909.770069][ T5912] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  909.981219][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  909.992158][ T5912] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  910.001881][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  910.020419][ T5912] usb 5-1: config 0 descriptor??
[  910.027510][T22096] cdc_ncm 1-1:1.0: setting tx_max = 88
[  910.058867][ T5912] pwc: Askey VC010 type 2 USB webcam detected.
[  910.454566][ T5912] pwc: recv_control_msg error -32 req 02 val 2b00
[  910.472071][ T5912] pwc: recv_control_msg error -32 req 02 val 2700
[  910.479728][ T5912] pwc: recv_control_msg error -32 req 02 val 2c00
[  910.497229][ T5912] pwc: recv_control_msg error -32 req 04 val 1000
[  910.718252][ T5912] pwc: recv_control_msg error -71 req 04 val 1400
[  910.725537][ T5912] pwc: recv_control_msg error -71 req 02 val 2000
[  910.739653][ T5912] pwc: recv_control_msg error -71 req 02 val 2100
[  910.754576][ T5912] pwc: recv_control_msg error -71 req 04 val 1500
[  910.762898][ T5912] pwc: recv_control_msg error -71 req 02 val 2500
[  910.770141][ T5912] pwc: recv_control_msg error -71 req 02 val 2400
[  910.777334][ T5912] pwc: recv_control_msg error -71 req 02 val 2600
[  910.787849][ T5912] pwc: recv_control_msg error -71 req 02 val 2900
[  910.797023][ T5912] pwc: recv_control_msg error -71 req 02 val 2800
[  910.804666][ T5912] pwc: recv_control_msg error -71 req 04 val 1100
[  910.812506][ T5912] pwc: recv_control_msg error -71 req 04 val 1200
[  910.828030][ T5912] pwc: Registered as video103.
[  910.838775][ T5912] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input169
[  910.884170][ T5912] usb 5-1: USB disconnect, device number 108
[  911.761384][T22096] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  911.842010][T22096] usb 1-1: USB disconnect, device number 122
[  911.884160][T22096] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[  912.394397][T22096] hid_parser_main: 13 callbacks suppressed
[  912.394421][T22096] hid-generic 0000:0000:0000.00AE: unknown main item tag 0x0
[  912.467922][T22096] hid-generic 0000:0000:0000.00AE: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  914.401690][   T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  914.638217][   T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  914.828943][   T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  915.170615][   T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  915.264143][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  915.277012][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  915.293134][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  915.317154][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  915.330400][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  915.763501][   T35] bridge_slave_1: left allmulticast mode
[  915.763590][   T35] bridge_slave_1: left promiscuous mode
[  915.763925][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  915.783642][   T35] bridge_slave_0: left allmulticast mode
[  915.783670][   T35] bridge_slave_0: left promiscuous mode
[  915.783908][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  916.318923][T27559] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7535'.
[  916.554338][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  916.566003][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  916.581752][   T35] bond0 (unregistering): Released all slaves
[  916.871358][T27564] kvm: kvm [27562]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x7fffffff
[  917.127183][   T35] hsr_slave_0: left promiscuous mode
[  917.160316][   T35] hsr_slave_1: left promiscuous mode
[  917.174543][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  917.197374][   T35] net_ratelimit: 10 callbacks suppressed
[  917.197393][   T35] batadv0: mtu less than device minimum
[  917.223499][   T35] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  917.236038][   T35] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  917.248046][   T35] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  917.260065][   T35] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  917.272098][   T35] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  917.284011][   T35] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  917.295958][   T35] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  917.307911][   T35] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  917.319940][   T35] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  917.382432][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  917.391442][T18890] Bluetooth: hci0: command tx timeout
[  917.426842][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  917.544854][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  917.561239][   T35] batman_adv: batadv0: Interface deactivated: dummy0
[  917.568233][   T35] batman_adv: batadv0: Removing interface: dummy0
[  917.631160][   T35] veth1_macvtap: left promiscuous mode
[  917.648509][   T35] veth0_macvtap: left promiscuous mode
[  917.669876][   T35] veth1_vlan: left promiscuous mode
[  917.688028][   T35] veth0_vlan: left promiscuous mode
[  919.477647][T18890] Bluetooth: hci0: command tx timeout
[  919.803262][   T35] team0 (unregistering): Port device team_slave_1 removed
[  919.891101][   T35] team0 (unregistering): Port device team_slave_0 removed
[  920.006044][T22182] usb 5-1: new full-speed USB device number 109 using dummy_hcd
[  920.198024][T22182] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  920.225092][T22182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  920.237586][T22182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  920.259140][T22182] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  920.312379][T22182] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  920.322946][T22182] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  920.341540][T22182] usb 5-1: Manufacturer: syz
[  920.364734][T22182] usb 5-1: config 0 descriptor??
[  920.569788][T27526] chnl_net:caif_netlink_parms(): no params data found
[  920.817491][T22182] appleir 0003:05AC:8243.00AF: unknown main item tag 0x0
[  920.872871][T22182] appleir 0003:05AC:8243.00AF: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  920.909663][T27526] bridge0: port 1(bridge_slave_0) entered blocking state
[  920.920287][T27526] bridge0: port 1(bridge_slave_0) entered disabled state
[  920.927634][T27526] bridge_slave_0: entered allmulticast mode
[  920.935997][T27526] bridge_slave_0: entered promiscuous mode
[  920.945852][T27526] bridge0: port 2(bridge_slave_1) entered blocking state
[  920.953398][T27526] bridge0: port 2(bridge_slave_1) entered disabled state
[  920.961239][T27526] bridge_slave_1: entered allmulticast mode
[  920.969103][T27526] bridge_slave_1: entered promiscuous mode
[  921.082571][T27526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  921.158427][T27526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  921.328389][T27526] team0: Port device team_slave_0 added
[  921.362916][T27526] team0: Port device team_slave_1 added
[  921.453316][T27526] batman_adv: batadv0: Adding interface: batadv_slave_0
[  921.468596][T27526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  921.544337][T27526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  921.552150][T18890] Bluetooth: hci0: command tx timeout
[  921.588510][T27526] batman_adv: batadv0: Adding interface: batadv_slave_1
[  921.605899][T27526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  921.682196][T27526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  921.806193][T27526] hsr_slave_0: entered promiscuous mode
[  921.822161][T27526] hsr_slave_1: entered promiscuous mode
[  921.841354][T27526] debugfs: 'hsr0' already exists in 'hsr'
[  921.854584][T27526] Cannot create hsr debugfs directory
[  922.971773][T22096] usb 5-1: USB disconnect, device number 109
[  923.620543][   T10] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[  923.630571][T18890] Bluetooth: hci0: command tx timeout
[  923.756544][T27526] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  923.810716][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  923.818663][T27526] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  923.860532][   T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  923.869650][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.912077][T27526] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  923.933337][   T10] usb 1-1: config 0 descriptor??
[  923.967100][   T10] pwc: Askey VC010 type 2 USB webcam detected.
[  924.011199][T27526] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  924.382817][   T10] pwc: recv_control_msg error -32 req 02 val 2b00
[  924.402841][   T10] pwc: recv_control_msg error -32 req 02 val 2700
[  924.414019][   T10] pwc: recv_control_msg error -32 req 02 val 2c00
[  924.424155][   T10] pwc: recv_control_msg error -32 req 04 val 1000
[  924.498855][T27526] 8021q: adding VLAN 0 to HW filter on device bond0
[  924.538409][T27526] 8021q: adding VLAN 0 to HW filter on device team0
[  924.558418][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state
[  924.565667][ T6244] bridge0: port 1(bridge_slave_0) entered forwarding state
[  924.598607][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state
[  924.605880][ T6244] bridge0: port 2(bridge_slave_1) entered forwarding state
[  924.663317][   T10] pwc: recv_control_msg error -71 req 04 val 1400
[  924.688954][   T10] pwc: recv_control_msg error -71 req 02 val 2000
[  924.712116][   T10] pwc: recv_control_msg error -71 req 02 val 2100
[  924.734959][   T10] pwc: recv_control_msg error -71 req 04 val 1500
[  924.763390][   T10] pwc: recv_control_msg error -71 req 02 val 2500
[  924.779111][   T10] pwc: recv_control_msg error -71 req 02 val 2400
[  924.800452][   T10] pwc: recv_control_msg error -71 req 02 val 2600
[  924.809707][T27526] 8021q: adding VLAN 0 to HW filter on device batadv0
[  924.817255][   T10] pwc: recv_control_msg error -71 req 02 val 2900
[  924.827308][   T10] pwc: recv_control_msg error -71 req 02 val 2800
[  924.861164][   T10] pwc: recv_control_msg error -71 req 04 val 1100
[  924.890956][   T10] pwc: recv_control_msg error -71 req 04 val 1200
[  924.917897][   T10] pwc: Registered as video103.
[  924.944146][   T10] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input170
[  924.968633][T27526] veth0_vlan: entered promiscuous mode
[  925.008893][   T10] usb 1-1: USB disconnect, device number 123
[  925.045003][T27526] veth1_vlan: entered promiscuous mode
[  925.122022][T27526] veth0_macvtap: entered promiscuous mode
[  925.160657][T27526] veth1_macvtap: entered promiscuous mode
[  925.216862][T27526] batman_adv: batadv0: Interface activated: batadv_slave_0
[  925.258224][T27526] batman_adv: batadv0: Interface activated: batadv_slave_1
[  925.309022][ T6244] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  925.356331][ T6244] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  925.421103][ T6244] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  925.442882][ T6244] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  925.725923][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  925.781598][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  925.858853][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  925.893582][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  927.129318][T27827] "syz.0.7594" (27827) uses obsolete ecb(arc4) skcipher
[  927.740808][T27857] KVM: debugfs: duplicate directory 27857-4
[  927.909482][T27859] net_ratelimit: 30 callbacks suppressed
[  927.909503][T27859] IPv4: Oversized IP packet from 127.202.26.0
[  927.964244][T27861] geneve4: entered promiscuous mode
[  928.274340][T27867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7606'.
[  928.303671][T27867] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  928.422055][T27874] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.7608'.
[  933.660866][T28034] binder: 28033:28034 ioctl c0306201 80000540 returned -14
[  933.665621][T28037] binder: 28033:28037 unknown command 0
[  933.694256][T28037] binder: 28033:28037 ioctl c0306201 80000640 returned -22
[  934.029347][T28053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7660'.
[  934.044648][T28053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7660'.
[  934.284104][T28065] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  934.830203][   T10] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[  935.000063][   T10] usb 4-1: Using ep0 maxpacket: 16
[  935.036974][   T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  935.075787][   T10] usb 4-1: config 0 has no interface number 0
[  935.125581][   T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  935.168110][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  935.207792][   T10] usb 4-1: Product: syz
[  935.222704][   T10] usb 4-1: Manufacturer: syz
[  935.227466][   T10] usb 4-1: SerialNumber: syz
[  935.278089][   T10] usb 4-1: config 0 descriptor??
[  935.294448][   T10] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  936.124792][T28125] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3134677450 (3134677450 ns) > initial count (1366566911 ns). Using initial count to start timer.
[  936.146178][T28128] vcan0: tx drop: invalid da for name 0xfffffffffffffffe
[  936.472407][T28139] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7678'.
[  936.482173][T28139] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7678'.
[  936.747480][   T10] gspca_spca1528: reg_w err -71
[  936.757645][   T10] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71
[  936.792562][   T10] usb 4-1: USB disconnect, device number 112
[  936.825227][T19379] hid-generic 0000:0000:0000.00B0: unknown main item tag 0x0
[  936.837883][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  936.845557][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  936.913498][T19379] hid-generic 0000:0000:0000.00B0: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  937.066232][ T6983] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[  937.271946][ T6983] usb 1-1: config 0 has no interfaces?
[  937.288167][ T6983] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  937.350845][ T6983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  937.359796][ T6983] usb 1-1: SerialNumber: syz
[  937.379161][ T6983] usb 1-1: config 0 descriptor??
[  937.731240][ T6983] usb 1-1: USB disconnect, device number 124
[  937.970002][ T5912] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[  938.160423][ T5912] usb 4-1: Using ep0 maxpacket: 16
[  938.182193][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  938.221443][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  938.262794][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  938.306500][ T5912] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  938.336204][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  938.420982][ T5912] usb 4-1: config 0 descriptor??
[  938.864167][ T5912] microsoft 0003:045E:07DA.00B1: unknown main item tag 0x0
[  938.880150][ T5912] microsoft 0003:045E:07DA.00B1: ignoring exceeding usage max
[  938.978626][ T5912] microsoft 0003:045E:07DA.00B1: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  939.020788][ T5912] microsoft 0003:045E:07DA.00B1: no inputs found
[  939.028546][T28200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7693'.
[  939.039909][ T5912] microsoft 0003:045E:07DA.00B1: could not initialize ff, continuing anyway
[  939.150064][ T5912] usb 4-1: USB disconnect, device number 113
[  939.473123][T28203] fido_id[28203]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  939.990029][T22182] usb 8-1: new high-speed USB device number 37 using dummy_hcd
[  940.099954][ T6983] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  940.170172][T22182] usb 8-1: Using ep0 maxpacket: 16
[  940.201363][T22182] usb 8-1: config 0 has an invalid interface number: 105 but max is 0
[  940.224763][T22182] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  940.244334][T22182] usb 8-1: config 0 has no interface number 0
[  940.250516][T22096] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[  940.279169][ T6983] usb 6-1: Using ep0 maxpacket: 32
[  940.291074][ T6983] usb 6-1: config 0 has no interfaces?
[  940.296715][ T6983] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  940.306744][T22182] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  940.350874][T22182] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  940.358946][T22182] usb 8-1: Product: syz
[  940.368432][ T6983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  940.401905][T22096] usb 1-1: Using ep0 maxpacket: 32
[  940.407319][T22182] usb 8-1: Manufacturer: syz
[  940.413346][ T6983] usb 6-1: config 0 descriptor??
[  940.431874][T22182] usb 8-1: SerialNumber: syz
[  940.444511][T22096] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  940.471205][T22182] usb 8-1: config 0 descriptor??
[  940.486955][T22096] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  940.516816][T22182] uvcvideo 8-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  940.550040][T22096] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  940.559519][T22096] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  940.560192][T22182] uvcvideo 8-1:0.105: No valid video chain found.
[  940.606604][T22096] usb 1-1: config 0 descriptor??
[  940.738922][T22182] usb 8-1: USB disconnect, device number 37
[  940.773664][   T10] usb 6-1: USB disconnect, device number 28
[  941.117900][T22096] savu 0003:1E7D:2D5A.00B2: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  941.458275][T22096] usb 1-1: USB disconnect, device number 125
[  941.670427][T28268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7712'.
[  941.762481][   T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  941.898477][T28273] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  941.964492][   T10] usb 6-1: Using ep0 maxpacket: 32
[  941.986518][   T10] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  941.999944][   T10] usb 6-1: config 0 has no interface number 0
[  942.013320][   T10] usb 6-1: config 0 interface 12 has no altsetting 0
[  942.036186][   T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  942.054293][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  942.073280][   T10] usb 6-1: Product: syz
[  942.081953][   T10] usb 6-1: Manufacturer: syz
[  942.097036][   T10] usb 6-1: SerialNumber: syz
[  942.124015][   T10] usb 6-1: config 0 descriptor??
[  942.375842][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  942.375862][   T30] audit: type=1326 audit(1769321145.620:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28288 comm="syz.0.7717" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f53539 code=0x0
[  943.781644][   T10] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71
[  943.790590][   T10] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  943.802801][   T10] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  943.810581][   T10] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[  943.829100][   T10] usb 6-1: USB disconnect, device number 29
[  944.669995][T19379] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  944.840426][T19379] usb 6-1: Using ep0 maxpacket: 32
[  944.857390][T19379] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[  944.877065][T19379] usb 6-1: config 0 has no interface number 0
[  944.897554][T19379] usb 6-1: config 0 interface 89 has no altsetting 0
[  944.915871][T19379] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  944.930969][T19379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  944.944673][T19379] usb 6-1: Product: syz
[  944.948911][T19379] usb 6-1: Manufacturer: syz
[  944.966221][T19379] usb 6-1: SerialNumber: syz
[  944.983972][T19379] usb 6-1: config 0 descriptor??
[  944.998359][T19379] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  945.017732][T19379] em28xx 6-1:0.89: Video interface 89 found: bulk
[  945.028764][   T10] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[  945.060190][T22182] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[  945.212351][   T10] usb 1-1: Using ep0 maxpacket: 32
[  945.232518][T22182] usb 5-1: Using ep0 maxpacket: 32
[  945.256640][   T10] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[  945.284968][T22182] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  945.299896][   T10] usb 1-1: config 0 has no interface number 0
[  945.306288][T22182] usb 5-1: config 0 has no interface number 0
[  945.317401][   T10] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  945.334318][T22182] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  945.376422][   T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  945.391713][T22182] usb 5-1: config 0 interface 89 has no altsetting 0
[  945.417574][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.433204][T22182] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  945.443593][   T10] usb 1-1: Product: syz
[  945.447939][T22182] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.457553][   T10] usb 1-1: Manufacturer: syz
[  945.462726][   T10] usb 1-1: SerialNumber: syz
[  945.467528][T22182] usb 5-1: Product: syz
[  945.474369][T22182] usb 5-1: Manufacturer: syz
[  945.483523][   T10] usb 1-1: config 0 descriptor??
[  945.489779][T28369] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  945.506509][T22182] usb 5-1: SerialNumber: syz
[  945.522535][T22182] usb 5-1: config 0 descriptor??
[  945.544546][T22182] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  945.557998][T22182] em28xx 5-1:0.89: Video interface 89 found:
[  945.619633][T28385] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7747'.
[  945.648772][T19379] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[  945.743875][T28369] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  945.943204][T28401] netlink: 'syz.3.7751': attribute type 13 has an invalid length.
[  946.034228][ T6983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  946.100483][T19379] em28xx 6-1:0.89: AC97 command still being executed: not handled properly!
[  946.171966][T22182] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[  946.279551][T19379] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  946.299724][T19379] em28xx 6-1:0.89: board has no eeprom
[  946.393242][T19379] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[  946.415714][T19379] em28xx 6-1:0.89: analog set to bulk mode.
[  946.443766][  T796] em28xx 6-1:0.89: Registering V4L2 extension
[  946.469985][T19379] usb 6-1: USB disconnect, device number 30
[  946.499487][T19379] em28xx 6-1:0.89: Disconnecting em28xx
[  946.589875][  T796] em28xx 6-1:0.89: Config register raw data: 0xffffffed
[  946.617991][  T796] em28xx 6-1:0.89: AC97 chip type couldn't be determined
[  946.636742][  T796] em28xx 6-1:0.89: No AC97 audio processor
[  946.653992][  T796] usb 6-1: Decoder not found
[  946.670597][T22193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  946.680327][  T796] em28xx 6-1:0.89: failed to create media graph
[  946.687123][  T796] em28xx 6-1:0.89: V4L2 device video103 deregistered
[  946.704948][  T796] em28xx 6-1:0.89: Registering snapshot button...
[  946.735991][  T796] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input172
[  946.780632][  T796] em28xx 6-1:0.89: Remote control support is not available for this card.
[  946.807299][T22182] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  946.826144][T19379] em28xx 6-1:0.89: Closing input extension
[  946.838502][T28426] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7757'.
[  946.848049][T22182] em28xx 5-1:0.89: board has no eeprom
[  946.861497][T19379] em28xx 6-1:0.89: Deregistering snapshot button
[  946.930912][T22182] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[  946.959899][T22182] em28xx 5-1:0.89: analog set to bulk mode.
[  946.993067][   T10] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  947.020981][  T796] em28xx 5-1:0.89: Registering V4L2 extension
[  947.047700][   T10] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9
[  947.063079][T22182] usb 5-1: USB disconnect, device number 110
[  947.117848][T22182] em28xx 5-1:0.89: Disconnecting em28xx
[  947.134462][   T10] asix 1-1:0.188: probe with driver asix failed with error -71
[  947.143999][T19379] em28xx 6-1:0.89: Freeing device
[  947.205846][   T10] usb 1-1: USB disconnect, device number 126
[  947.279630][  T796] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[  947.307236][  T796] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[  947.343381][  T796] em28xx 5-1:0.89: No AC97 audio processor
[  947.375517][  T796] usb 5-1: Decoder not found
[  947.380307][T22193] usb 8-1: new high-speed USB device number 38 using dummy_hcd
[  947.407353][  T796] em28xx 5-1:0.89: failed to create media graph
[  947.434281][  T796] em28xx 5-1:0.89: V4L2 device video103 deregistered
[  947.467584][T28437] ==================================================================
[  947.475720][T28437] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420
[  947.483148][T28437] Read of size 8 at addr ffff888060580740 by task v4l_id/28437
[  947.490734][T28437] 
[  947.493112][T28437] CPU: 0 UID: 0 PID: 28437 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  947.493142][T28437] Tainted: [L]=SOFTLOCKUP
[  947.493150][T28437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  947.493164][T28437] Call Trace:
[  947.493173][T28437]  <TASK>
[  947.493182][T28437]  dump_stack_lvl+0xe8/0x150
[  947.493213][T28437]  print_report+0xba/0x230
[  947.493235][T28437]  ? v4l2_fh_open+0xac/0x420
[  947.493260][T28437]  kasan_report+0x117/0x150
[  947.493285][T28437]  ? v4l2_fh_open+0xac/0x420
[  947.493316][T28437]  v4l2_fh_open+0xac/0x420
[  947.493351][T28437]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  947.493387][T28437]  em28xx_v4l2_open+0x157/0x9a0
[  947.493413][T28437]  ? do_raw_spin_lock+0x12b/0x2f0
[  947.493446][T28437]  v4l2_open+0x1bf/0x3a0
[  947.493478][T28437]  chrdev_open+0x4cd/0x5e0
[  947.493503][T28437]  ? __pfx_chrdev_open+0x10/0x10
[  947.493527][T28437]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  947.493560][T28437]  ? __pfx_chrdev_open+0x10/0x10
[  947.493582][T28437]  do_dentry_open+0x7ce/0x1420
[  947.493615][T28437]  vfs_open+0x3b/0x340
[  947.493639][T28437]  ? path_openat+0x346e/0x3e20
[  947.493658][T28437]  path_openat+0x3486/0x3e20
[  947.493692][T28437]  ? kmem_cache_alloc_noprof+0x370/0x6e0
[  947.493722][T28437]  ? getname_flags+0xb7/0x540
[  947.493748][T28437]  ? __pfx_path_openat+0x10/0x10
[  947.493768][T28437]  ? __lock_acquire+0x6b5/0x2cf0
[  947.493797][T28437]  do_filp_open+0x22d/0x490
[  947.493818][T28437]  ? __pfx_do_filp_open+0x10/0x10
[  947.493848][T28437]  ? _raw_spin_unlock+0x28/0x50
[  947.493873][T28437]  ? alloc_fd+0x64b/0x6c0
[  947.493903][T28437]  do_sys_openat2+0x12f/0x220
[  947.493931][T28437]  ? __pfx_do_sys_openat2+0x10/0x10
[  947.493958][T28437]  ? exc_page_fault+0x6a/0xc0
[  947.493987][T28437]  ? do_user_addr_fault+0xc7c/0x1360
[  947.494012][T28437]  __x64_sys_openat+0x138/0x170
[  947.494041][T28437]  do_syscall_64+0xe2/0xf80
[  947.494069][T28437]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  947.494089][T28437]  ? trace_irq_disable+0x37/0x100
[  947.494117][T28437]  ? clear_bhb_loop+0x60/0xb0
[  947.494141][T28437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  947.494163][T28437] RIP: 0033:0x7f20b16a7407
[  947.494182][T28437] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  947.494199][T28437] RSP: 002b:00007ffcfdfc51f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  947.494221][T28437] RAX: ffffffffffffffda RBX: 00007f20b1d41880 RCX: 00007f20b16a7407
[  947.494236][T28437] RDX: 0000000000000000 RSI: 00007ffcfdfc6f1c RDI: ffffffffffffff9c
[  947.494251][T28437] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  947.494263][T28437] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  947.494275][T28437] R13: 00007ffcfdfc5440 R14: 00007f20b1e46000 R15: 000055d5bef714d8
[  947.494299][T28437]  </TASK>
[  947.494307][T28437] 
[  947.781041][T28437] Allocated by task 796:
[  947.785340][T28437]  kasan_save_track+0x3e/0x80
[  947.790066][T28437]  __kasan_kmalloc+0x93/0xb0
[  947.794694][T28437]  __kmalloc_cache_noprof+0x3d1/0x6e0
[  947.800094][T28437]  em28xx_v4l2_init+0x10b/0x2e70
[  947.805166][T28437]  em28xx_init_extension+0x120/0x1c0
[  947.810493][T28437]  process_scheduled_works+0xaec/0x17a0
[  947.816065][T28437]  worker_thread+0x89f/0xd90
[  947.820681][T28437]  kthread+0x726/0x8b0
[  947.824787][T28437]  ret_from_fork+0x51b/0xa40
[  947.829396][T28437]  ret_from_fork_asm+0x1a/0x30
[  947.834279][T28437] 
[  947.836621][T28437] Freed by task 796:
[  947.840573][T28437]  kasan_save_track+0x3e/0x80
[  947.845382][T28437]  kasan_save_free_info+0x46/0x50
[  947.850530][T28437]  __kasan_slab_free+0x5c/0x80
[  947.855318][T28437]  kfree+0x1be/0x650
[  947.859343][T28437]  em28xx_v4l2_init+0x1683/0x2e70
[  947.864409][T28437]  em28xx_init_extension+0x120/0x1c0
[  947.869821][T28437]  process_scheduled_works+0xaec/0x17a0
[  947.875397][T28437]  worker_thread+0x89f/0xd90
[  947.880013][T28437]  kthread+0x726/0x8b0
[  947.884122][T28437]  ret_from_fork+0x51b/0xa40
[  947.888771][T28437]  ret_from_fork_asm+0x1a/0x30
[  947.893563][T28437] 
[  947.895909][T28437] The buggy address belongs to the object at ffff888060580000
[  947.895909][T28437]  which belongs to the cache kmalloc-8k of size 8192
[  947.910256][T28437] The buggy address is located 1856 bytes inside of
[  947.910256][T28437]  freed 8192-byte region [ffff888060580000, ffff888060582000)
[  947.924248][T28437] 
[  947.926597][T28437] The buggy address belongs to the physical page:
[  947.933122][T28437] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60580
[  947.941909][T28437] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  947.950428][T28437] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  947.958438][T28437] page_type: f5(slab)
[  947.962441][T28437] raw: 00fff00000000040 ffff88813ff27280 0000000000000000 dead000000000001
[  947.971056][T28437] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  947.979682][T28437] head: 00fff00000000040 ffff88813ff27280 0000000000000000 dead000000000001
[  947.988547][T28437] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  947.997235][T28437] head: 00fff00000000003 ffffea0001816001 00000000ffffffff 00000000ffffffff
[  948.006009][T28437] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  948.014799][T28437] page dumped because: kasan: bad access detected
[  948.021331][T28437] page_owner tracks the page as allocated
[  948.027257][T28437] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 26955, tgid 26955 (syz-executor), ts 894974965758, free_ts 894972659979
[  948.047464][T28437]  post_alloc_hook+0x228/0x280
[  948.052353][T28437]  get_page_from_freelist+0x24dc/0x2580
[  948.057930][T28437]  __alloc_frozen_pages_noprof+0x18d/0x380
[  948.063847][T28437]  alloc_pages_mpol+0x232/0x4a0
[  948.068806][T28437]  allocate_slab+0x86/0x3a0
[  948.073342][T28437]  ___slab_alloc+0xd82/0x1760
[  948.078070][T28437]  __slab_alloc+0x65/0x100
[  948.082574][T28437]  __kvmalloc_node_noprof+0x673/0x8d0
[  948.088142][T28437]  pfifo_fast_init+0x372/0x6c0
[  948.092935][T28437]  qdisc_create_dflt+0x13b/0x4c0
[  948.097894][T28437]  mq_init+0x2db/0x690
[  948.102079][T28437]  qdisc_create_dflt+0x13b/0x4c0
[  948.107036][T28437]  dev_activate+0x1ce/0x1150
[  948.111652][T28437]  __dev_open+0x67a/0x830
[  948.116044][T28437]  __dev_change_flags+0x1f7/0x690
[  948.121171][T28437]  netif_change_flags+0x88/0x1a0
[  948.126126][T28437] page last free pid 26955 tgid 26955 stack trace:
[  948.132639][T28437]  __free_frozen_pages+0xbb0/0xd10
[  948.137947][T28437]  __slab_free+0x2ce/0x320
[  948.142496][T28437]  qlist_free_all+0x97/0x100
[  948.147110][T28437]  kasan_quarantine_reduce+0x148/0x160
[  948.152678][T28437]  __kasan_slab_alloc+0x22/0x80
[  948.157565][T28437]  kmem_cache_alloc_node_noprof+0x427/0x6f0
[  948.163508][T28437]  __alloc_skb+0x1d7/0x390
[  948.167985][T28437]  netlink_sendmsg+0x5d4/0xb40
[  948.172789][T28437]  __sock_sendmsg+0x21c/0x270
[  948.177502][T28437]  __sys_sendto+0x3c0/0x550
[  948.182042][T28437]  __ia32_compat_sys_socketcall+0x765/0xa10
[  948.187957][T28437]  do_int80_emulation+0x111/0x400
[  948.193010][T28437]  asm_int80_emulation+0x1a/0x20
[  948.197972][T28437] 
[  948.200660][T28437] Memory state around the buggy address:
[  948.206398][T28437]  ffff888060580600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  948.214597][T28437]  ffff888060580680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  948.222677][T28437] >ffff888060580700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  948.231269][T28437]                                            ^
[  948.237457][T28437]  ffff888060580780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  948.245648][T28437]  ffff888060580800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  948.253817][T28437] ==================================================================
[  948.263446][  T796] em28xx 5-1:0.89: Registering snapshot button...
[  948.291319][  T796] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input173
[  948.550191][  T796] em28xx 5-1:0.89: Remote control support is not available for this card.
[  948.583698][T22182] em28xx 5-1:0.89: Closing input extension
[  948.589793][T22182] em28xx 5-1:0.89: Deregistering snapshot button
[  948.596623][T28437] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  948.603876][T28437] CPU: 0 UID: 0 PID: 28437 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  948.614594][T28437] Tainted: [L]=SOFTLOCKUP
[  948.618954][T28437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  948.629054][T28437] Call Trace:
[  948.632434][T28437]  <TASK>
[  948.635416][T28437]  vpanic+0x1e0/0x670
[  948.639451][T28437]  panic+0xc5/0xd0
[  948.643202][T28437]  ? __pfx_panic+0x10/0x10
[  948.647738][T28437]  ? preempt_schedule_common+0x82/0xd0
[  948.653270][T28437]  ? v4l2_fh_open+0xac/0x420
[  948.657919][T28437]  check_panic_on_warn+0x89/0xb0
[  948.662892][T28437]  ? v4l2_fh_open+0xac/0x420
[  948.667509][T28437]  end_report+0x6f/0x140
[  948.671784][T28437]  kasan_report+0x128/0x150
[  948.676342][T28437]  ? v4l2_fh_open+0xac/0x420
[  948.680962][T28437]  v4l2_fh_open+0xac/0x420
[  948.685504][T28437]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  948.691517][T28437]  em28xx_v4l2_open+0x157/0x9a0
[  948.696401][T28437]  ? do_raw_spin_lock+0x12b/0x2f0
[  948.701459][T28437]  v4l2_open+0x1bf/0x3a0
[  948.705763][T28437]  chrdev_open+0x4cd/0x5e0
[  948.710209][T28437]  ? __pfx_chrdev_open+0x10/0x10
[  948.715264][T28437]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  948.721625][T28437]  ? __pfx_chrdev_open+0x10/0x10
[  948.726593][T28437]  do_dentry_open+0x7ce/0x1420
[  948.731389][T28437]  vfs_open+0x3b/0x340
[  948.735521][T28437]  ? path_openat+0x346e/0x3e20
[  948.740333][T28437]  path_openat+0x3486/0x3e20
[  948.744961][T28437]  ? kmem_cache_alloc_noprof+0x370/0x6e0
[  948.750628][T28437]  ? getname_flags+0xb7/0x540
[  948.755334][T28437]  ? __pfx_path_openat+0x10/0x10
[  948.760379][T28437]  ? __lock_acquire+0x6b5/0x2cf0
[  948.765350][T28437]  do_filp_open+0x22d/0x490
[  948.769892][T28437]  ? __pfx_do_filp_open+0x10/0x10
[  948.775043][T28437]  ? _raw_spin_unlock+0x28/0x50
[  948.779925][T28437]  ? alloc_fd+0x64b/0x6c0
[  948.784313][T28437]  do_sys_openat2+0x12f/0x220
[  948.789079][T28437]  ? __pfx_do_sys_openat2+0x10/0x10
[  948.794322][T28437]  ? exc_page_fault+0x6a/0xc0
[  948.799043][T28437]  ? do_user_addr_fault+0xc7c/0x1360
[  948.804534][T28437]  __x64_sys_openat+0x138/0x170
[  948.809525][T28437]  do_syscall_64+0xe2/0xf80
[  948.814073][T28437]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  948.820168][T28437]  ? trace_irq_disable+0x37/0x100
[  948.825236][T28437]  ? clear_bhb_loop+0x60/0xb0
[  948.829939][T28437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  948.836036][T28437] RIP: 0033:0x7f20b16a7407
[  948.840474][T28437] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  948.860457][T28437] RSP: 002b:00007ffcfdfc51f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  948.868998][T28437] RAX: ffffffffffffffda RBX: 00007f20b1d41880 RCX: 00007f20b16a7407
[  948.877001][T28437] RDX: 0000000000000000 RSI: 00007ffcfdfc6f1c RDI: ffffffffffffff9c
[  948.884997][T28437] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  948.892998][T28437] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  948.900999][T28437] R13: 00007ffcfdfc5440 R14: 00007f20b1e46000 R15: 000055d5bef714d8
[  948.909002][T28437]  </TASK>
[  948.912409][T28437] Kernel Offset: disabled
[  948.916745][T28437] Rebooting in 86400 seconds..