last executing test programs:

2m24.1712814s ago: executing program 4 (id=105):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x40004161, 0x0)

2m23.958054082s ago: executing program 4 (id=106):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000900), 0x800, 0x0)
read$FUSE(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104)
write$FUSE_WRITE(r6, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m21.138436937s ago: executing program 4 (id=114):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000080)="b1", 0x1, 0x40080c4, &(0x7f0000000140)={0xa, 0x4e23, 0x1, @loopback, 0xffffffff}, 0x1c)

2m20.997807935s ago: executing program 4 (id=115):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2m20.722082071s ago: executing program 4 (id=116):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000050)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050)

2m20.584539599s ago: executing program 4 (id=118):
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000200)="96473bc34c4dafed22a8d7a4e0352f80116aebd00e1e02121b41d715d4f0381b17118d17cb70c2a6011ebef5f44701be028da29a0ec77e2cdf4bdd2df08d0db15017e41c22e0db1fb1038f8a9617d716783e4f3c2e45ee9f82ccd00722a8a5215579dc91349d042740e7b6b2bf63cfbc9c7c4e3103ee23c9d5a822f2bd34cf52dfe020fd3205c92198b20de49a3245de4694c602476d9e1f876362b0fd0b6feafab3da160f07e47f57e27614850309ef276380a43b60", 0xb6}, {&(0x7f0000000040)="3327a85254f7f87496dc71bc9ca001b93e5e7f18463ff887353ffa0bcc7a5cb7565a70066d2e806275", 0x29}, {&(0x7f00000002c0)="511d3bd0acfb63848397f51d5bd5642062074d2624f5e40d6f4c63de1ef77990dfd82158a573b56d8157eba2f650883af9b97ee55bd8b949723d27ebf003cea02cfdb23b0a3f7c6059fa8b164b4c4d383db2afc2d4833f12e6035e3c31450c93811de3c7c9817a4d6d60b40ef86f407444490bd3b905011586bbd57079f94205efcced27f3a28f222feec29e624b0639df1066e99424db9f40", 0x99}], 0x3, 0x0, 0x0, 0x200000c1}, 0x4004000)
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000380)={0x7, 'vlan0\x00', {0x9}, 0xa})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0x5, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'tunl0\x00', <r7=>r6, 0x700, 0x20, 0x2, 0x7fff, {{0x1b, 0x4, 0x3, 0x9, 0x6c, 0x67, 0x0, 0x4, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1b, 0x2a, [@broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @local]}, @timestamp_prespec={0x44, 0x34, 0x4, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x800}, {@loopback, 0x2}, {@broadcast, 0x5}, {@broadcast, 0x6}, {@private=0xa010100, 0x6}, {@remote}]}, @noop, @end, @ssrr={0x89, 0x7, 0xdc, [@broadcast]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', <r8=>r7, 0x29, 0x3, 0x80, 0x7, 0x40, @local, @local, 0x80, 0x80, 0xc, 0x80000000}})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xb8, r1, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf6}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xbe8b}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r9 = socket$kcm(0x10, 0x2, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r10 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xa, 0xc1})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
getsockopt$SO_TIMESTAMP(r11, 0x1, 0x1d, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x7b1281, 0x49, 0x12}, 0x18)
sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

2m5.417323524s ago: executing program 32 (id=118):
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000200)="96473bc34c4dafed22a8d7a4e0352f80116aebd00e1e02121b41d715d4f0381b17118d17cb70c2a6011ebef5f44701be028da29a0ec77e2cdf4bdd2df08d0db15017e41c22e0db1fb1038f8a9617d716783e4f3c2e45ee9f82ccd00722a8a5215579dc91349d042740e7b6b2bf63cfbc9c7c4e3103ee23c9d5a822f2bd34cf52dfe020fd3205c92198b20de49a3245de4694c602476d9e1f876362b0fd0b6feafab3da160f07e47f57e27614850309ef276380a43b60", 0xb6}, {&(0x7f0000000040)="3327a85254f7f87496dc71bc9ca001b93e5e7f18463ff887353ffa0bcc7a5cb7565a70066d2e806275", 0x29}, {&(0x7f00000002c0)="511d3bd0acfb63848397f51d5bd5642062074d2624f5e40d6f4c63de1ef77990dfd82158a573b56d8157eba2f650883af9b97ee55bd8b949723d27ebf003cea02cfdb23b0a3f7c6059fa8b164b4c4d383db2afc2d4833f12e6035e3c31450c93811de3c7c9817a4d6d60b40ef86f407444490bd3b905011586bbd57079f94205efcced27f3a28f222feec29e624b0639df1066e99424db9f40", 0x99}], 0x3, 0x0, 0x0, 0x200000c1}, 0x4004000)
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000380)={0x7, 'vlan0\x00', {0x9}, 0xa})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0x5, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'tunl0\x00', <r7=>r6, 0x700, 0x20, 0x2, 0x7fff, {{0x1b, 0x4, 0x3, 0x9, 0x6c, 0x67, 0x0, 0x4, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1b, 0x2a, [@broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @local]}, @timestamp_prespec={0x44, 0x34, 0x4, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x800}, {@loopback, 0x2}, {@broadcast, 0x5}, {@broadcast, 0x6}, {@private=0xa010100, 0x6}, {@remote}]}, @noop, @end, @ssrr={0x89, 0x7, 0xdc, [@broadcast]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', <r8=>r7, 0x29, 0x3, 0x80, 0x7, 0x40, @local, @local, 0x80, 0x80, 0xc, 0x80000000}})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xb8, r1, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf6}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xbe8b}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r9 = socket$kcm(0x10, 0x2, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r10 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xa, 0xc1})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
getsockopt$SO_TIMESTAMP(r11, 0x1, 0x1d, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x7b1281, 0x49, 0x12}, 0x18)
sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

8.946195068s ago: executing program 5 (id=760):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="c4e27d9811c4c1fde69762ec7cd166baa000ed0f20e035200000000f22e0f2af0f78e50f01cbc4c1d9c27df20b26650fc71c583ef26c", 0x36}], 0x1, 0x59, 0x0, 0x0)
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x1101}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x6, 0x0, 0x27}}, 0x0}, 0x400}], 0x0, 0x0, 0x0})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x4000000e42, 0x9, 0xffffffffffffffff, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x8, 0x7, 0x0, 0x8, 0x8b], 0x58000, 0x240046})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
open(&(0x7f0000000380)='./file0\x00', 0x0, 0x9a)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x7, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd0000, 0x80300})
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x40, 0x8, 0x0, 0x9, 0x11, 0x7, 0x40, 0x81, 0x1, 0x8, 0x2, 0x0, 0xe4, 0x1, 0x0, 0xf9, 0x2, 0xf, '\x00', 0x9, 0x6567})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

8.366332772s ago: executing program 5 (id=766):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x2000})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x1, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/199, 0xc7}], 0x1)

8.344349973s ago: executing program 0 (id=768):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x70bd29, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x2c}, 0x2, 0x34005}, 0x0)

8.246288169s ago: executing program 0 (id=769):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x28, 0x1, 0x0)
r1 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000780)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x6}})
openat$comedi(0xffffffffffffff9c, 0x0, 0x8ad01, 0x0)
ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x40000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$netlink(0x10, 0x3, 0xc)
socket(0x2c, 0x1, 0x1ff)
bind$netlink(r5, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000001000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000"], 0x94}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x204}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x4850)
io_uring_enter(r1, 0x47f6, 0xb277, 0x0, 0x0, 0x0)

7.587041487s ago: executing program 2 (id=772):
unshare(0x80)
syz_init_net_socket$ax25(0x3, 0x5, 0x31)

7.229787718s ago: executing program 5 (id=774):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000380)={0x80400, &(0x7f0000000040)=<r4=>0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}])
write$FUSE_ATTR(r0, &(0x7f0000005340)={0x78, 0x0, r1, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r2, r3, 0xb, 0x8, 0x1000000}}}, 0x78)

7.175668091s ago: executing program 0 (id=775):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r4, &(0x7f0000003900)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000008400000000000000ffff"], 0x18, 0x4}], 0x1, 0x40010)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x80000006, 0x4)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r6 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r6, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0)
ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})

7.153561233s ago: executing program 2 (id=776):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
socket$kcm(0x10, 0x2, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd04\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaK\xces\x04\x1e*p\x9e\xf2\x16\x01`\xd2+FG\tX)\x910\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xabo\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xf3\xa7*O\xe3\xc3L\xd6H\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e34~\xa8\xb8aQtp\xc8r_\x14K\xd35;\x8f_\xe0|Y\x8b'}]}, 0xbf)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="28000000161401"], 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x810)
ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000), 0x4)

7.058159898s ago: executing program 5 (id=777):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETS(r4, 0x89f0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x802, 0xd, "5dee0000005940090000000f00"})

6.923536776s ago: executing program 0 (id=778):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.815387699s ago: executing program 5 (id=779):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r0)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x2000, 0x34325244, 0x0, [], [0x2b8, 0x8], [0x0, 0x0, 0x59]})

4.763121682s ago: executing program 2 (id=780):
pipe2(&(0x7f0000000180)={0x0, <r0=>0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48)
r1 = socket(0x2c, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
fsopen(&(0x7f0000000280)='virtiofs\x00', 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0x94}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
socket$can_raw(0x1d, 0x3, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$can_bcm(r5, &(0x7f0000000080), 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000180)={&(0x7f00000005c0)={0x5, 0x15, 0xfffffffe, {0x0, 0x2710}, {}, {}, 0x1, @can={{0x2}, 0x2, 0x6a035825891a9861, 0x0, 0x0, "61bcf34b016813cf"}}, 0x48}, 0x1, 0x0, 0x0, 0x6686ae64641a9d97}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20)
close_range(r0, 0xffffffffffffffff, 0x0)

4.706263265s ago: executing program 0 (id=782):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x100000000000000, r2})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000440)={0x2710, 0x4, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x100000000000000, r2})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a3000"], 0x7c}}, 0xc000)
socket(0x1e, 0x4, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r5)
readv(r6, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001040)=""/203, 0xcb}], 0x2)

4.519882896s ago: executing program 3 (id=784):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1})
r1 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)

4.415221362s ago: executing program 1 (id=785):
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_emit_vhci(&(0x7f0000003e80)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x1, 0x41c}}}, 0x7)

4.314313518s ago: executing program 1 (id=786):
r0 = socket(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)={0x1060, 0x12, 0x100, 0x70bd27, 0x25dfdbfb, {0x23, 0x7, 0xac, 0x9, {0x4e21, 0x4e21, [0x8, 0x6, 0x4, 0x793], [0xfd, 0x9, 0x80000000, 0x10000], r1, [0xeb6d, 0x2]}, 0x1, 0xd}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "26534246d281e8b2ef38444b1115a114f29aa1478681507fcc3e88f1702019932aa7bb5750b474060225d54e90b51a770740f6908b43bef61357e5033504f410abb2d648c36061f847fa03b94bfbbcf8ed3039f04f4bc74f9b7b42d0863d5febbcdaf12dd8dc60bad13756f68744d80166be44974b1e68a7a12c032f8de0b0019794d7f8bbf6fc2a50bce58d17fd1891d1ecaf49ee8dc78518e894c3741eebbef01104b442f54a796cfcb2b5798736b55ca3f36f8737f274a363315577be4916fb23bc41abe127018245516bbad247cd2b5ea907b5df0b6a71c89b0b42f7f4a7dab04a09cb78349024297b389c9e651a24e522fd886d3e822137f9628fb216ac2e08e00f97b0ac25d36244f2bf1b16fbe0f0a94a8029681d714bf09ad600fea93057002302ac05f3d8b8013e94e79dafc64759b351294a550fdb3875ed3a045100cac7e12f8c4c34912e3388592000c75d5c7d8f874efb84b7fc820fee9f73a03bd5de6bef5acbfb5f95ef73a172cdb5bb50a6a2114ab273fae1e10e94be9247388ae8e0686b0d025edf3cf0a4fbb823ae0dbe05c29993b9e2906e54b9e37256734ddeb3baf21761f4b9e213cd5da7903cc6a40607175537344431e1ff86223a70987d1479e5bfe9651ab345531bfe079568aa559c569b6310eefd6b67f1fb007d5b4203550bbb5d219c9be7aa50d9912157a53b053b1f718a34497197e65fa0558113c6513e5bc0b091977b0dc6c255b98cb0f1b8b3966870fa748164e5056eed1af450b32d9620c3d788cd5845440fefe18dcf3092deac17e41bf4d5578e777019d6d0b453937e0d9f7dc70105f49f0275688c92f89d71c94b2a09f804e6261b9fa34f107000eabdfb4794248fb3653bdc1d64ec40da9739e7875f93ba05f85c76a8f6568650b498cf2f71c4ae3699872f1a74242761205944e272f4980c64d6855682652392dbb3e54ab94f75db5f86ad3d2eff8242b3dd378969512c49646a2ef47de368d1276e8b3ab826d88888f8b430c933e18c611669494025041d959b6c60654c9881eb1ff67b15698082cded2da431911c91d445b5600f06950ecaa2260ce73150b48c6d3ce9c2f8cd9bbc4449f19bfe44b2fe23e1e70f3a56dcbd7875cd5bd2e0b418aec2662e54abb231cd9722a930be9808e85fe2cbc44cec1ec03aeb5948652202d5921db8923a72b25d93165e3df2d6b4b507010d7a18b223a8e285ff3c3f1d70d30d3de9250f00c617c4ea2479788e7235ad951e942339e4bc3bff1f11f233b2503b261c47316acb3fb52afa20a1db5f90d0451dacc80037644f104a00715bf34e8dcc3c92f56069c15414ddd160a849d735f43859c216163564182d88ca7da149cdaa2bdb1ee204b511d005c796dbcb08509acf76b81fc112e195983440e3eb405259ed3cde27cba35a7123ffdf51637c8d4a34f8dcd6f61acce15f23a97e868d28c92d6dae254b90472d13fe8687e8d09e1ee9491b080b54c25e6a80be2e1819d6273a2b385d722622ca69b26d43c506ab2ece1f50ac308c0f9b77b5ec1cbaa484478c1b9edd0e756575f09468d6ad371e04b49ef2dbc834715a679c99b286464d820ed33c6e6caf59d33db2d2a88d6b478fa1ce2b7deee00b159d521098524abe7bed63d83228c5490b30b2f09e4a976c2ffc74d6a8dbe41586de4eb31fe9ff0e974723a06803acccdba3429ee2253e7897c440781c7b0964a4244dd14b66441fc919c80d2851f352c9056e6362b789d02c3ee5e0173e7b5e08278b174a749b38c25e7ead52a7f02d55bac096603d2f22c44e864843fe50f9dcd74691bb0449c7479aaad43b5da358fbe0e2655c5bbd17911a5ab712907984c4107bcfadf6740b5644c1d1a401c0848b914c0d1f448162164d3f48cdf9df86881602345962bb82c0984ea21d9a5d31402c9347c0626f05944d222a688035824ca74148f444e920e1fd8239ae2011250c59ac4f98d5682d5dbd65b0fae7e17cb5a61d67eb5750d276e34c815c4b8503b5455cea1881b12c89403a50f7f263b1a35495d4f374ddb425c237e689066efb74c4d12468d5f0001c125fd5c410e631cb18e35f0fb6327c62bcd4403e3440f3881d9cdc448113da3e5e3c01f1e48df272dbf7a116b3f2afec747050ac56f4a55828c86777db45e1566e267fe4b6f70177562b1c8aafcbfb5f5744e7b2045264d7ad38efda933a3dffa15dc1ea71c1bc8683ab6006a52868426c393cbcc7a24a8a8ba6579bb6460edacdfde192b7e2561dc0d12ff96096db50522c6714715451a987f65398d6f006b7b974259938663f9063d512cd4d8a393202fb4876f9c762964a2dc831c4e3080a2a198a4502e2708f8d17da68b1ab8f6888f5c322200aace66713602cf2037ea19633f9b1e85a207a6b3178a4bd06f8b9a5de185f6c58d9a237bc6c812a93e169c4b412afbd77c962105d84aaaf23730ff04ecd427469ba6e7eeb8bed7bfec11d30e7522f1f405590da2d352e8e3f8fc8a2376f2ab72e992224cb96ecad1f22ab614a192b916c7b84a7dce85076eadd28790f8e829082d2a4b9f50e41c82862c09fcf6062bc69f689247f84551fb20456c7ae8512ddc38bc1f4e70e178f7555a7284d517b3726aa7115a3f1cb37ef096c587a4f8882e43810dd57326d28835b2ad79b6f65656a3029f018b258e19d37a1628db0823c90611f73c8316d8b651b548cb90ed9f07d8c73111adbbfa5d03a4ccbfbbd8b05876d01db9b371fea14c2dca8d1c3bd02a792c3e89c6dc3e874c316ef3851930e199a4d0eb2f2da14c39a45dcd0469894efa480e37fb0b16b4b74dfecfd6232c1e284220f60f55913dc803075a049b523f11f608ce5d6e23d4e74a56ab1439db422f69becc546b7dfbbc9cf02f22e628d68d1edb8f9bf0aca6244e4e347d31f9a8ce03f55cb45bd417706ef884fd49f68c14deb871905c473458a1e94e00e95a3aff2142601c40569faf16292c9a06aa0d03666b996fdc10a3f62c91878faa870dd7ed33a7c1acd1118457793d75e057f845c8f3cf9e1e13924e2b26ebe4e74b8ca41de61e0f345921f9dd8ff23782143f917e5cbd3cfd796f4a7888ec975d67b3a07171969b59206b4aa084aad8e756e5ba42ed30b9497b6c56415080fe5341153511aba3c3443b4ee2c7d8a14d289fa4eaafe23208040644ef59d4124473f60f785eeaeacb1759473559ef8764365153172113aeac8a705a345082539c36abfcfd78773ed12c9e5bbef0ad963632bf7d59d61cd656a04bdd7746fad1a529bba660a08a9257aea9eaccc0898f6f7909663eff19dd976f4e1b487f63e559148092230ccd6130681c23562bb06e70f2ed5f940cd415b2f5344f8c2939902f3579839f35a324f83abe12debc31431a48b14eb6126b022cd91b7ee41be87225aef87522816854a3baa099ce58282cf210adeae53665ee53613f897756587843656e5cfba0ccddaeb5f4cec9bd0d6df44adfc26ac1dba0b35ed810f2003839935115aa76c82860579bd1b11ef3cb078744b9e427c42336c9415e1eb908e0b3b960e1a5c6d1dc6558e0ba580a282574ffe37bdec6b97098a6b5745cfc0219ab50249ed82324ead7109b2bbc87feddae8f6c5125193c023e1b0fa3da9d2df422af772459223ab14c03f7fc7581d503ff4b3e68a5ee7ee885ad6e635128bb806fb28b8731b85ff52933389d061e5fc97880ab5392882bcb1adf544cf36dbcd6c4984c451cb952d9388130e0e0ec7c486c76481c06a27ac53f25a4e0d2611ce0be7503e18f52bb7f1f5e00e08bdddc90e5bc1c3b0d53db02f8a0faeef93ba7a629164c4bad0c2796722eb9f0de9f9082e27efd6261b3673a2ca9bf59eafb6b349d087b48a7bfae69ad5d84605c787b4dbe19fb595b636a87c67e7b3e1fdc45efafeed2c15e020de2226b227347ec48fb1835cda08314139f0952c25ff4d09314bcd257a72c5048500bf1c720bf0d70bce282b71a591b1055a4109bf7820dd88fcbf1d0719636b4dfc572465e969275df315b4f1c0ef9046cc9400a4cebdf65e75873314de0f4d959a3ad06a5a8ab1832f4a613deae62cc0e91b3a392c166a0b355af2ca8510aff6aac476db00be41b531d0757b99ee2d6292fe8dd1e6837d75dfd8621ee8cb73d1d1cedcf8fada2eaac40378e7a208e7c99068e9c1c38fb41c1ea0a3cae5e1a214c4360bd1e4524fc06172bf39bdfa9e04d596762f98cf7d930a217f88101a7669c326757c228a73cae5ed5c9ca0eca1aa0968668f3546860ed635d12708becdbcf2b712f04fc77f462d1b09cbdb68467ec4593aaabeaae34c14e7da42aac23d0f13dbf579119b1ddf108f7a21a11fe2bf9036ac9e812cf35aa4043a85181114370bd4ff24d1685c8d01710abb4995a69eb9916c055079f732988a24ce4d2e0c569c5a9fa625703f4dae74bef10049a6561f069115391bac4c3931934ec01c34d932f3cdf501ac0344f42c20051b18d0d2d85bbeb485d29d84df2842ba0dbd994123d27d542903d4bd6992bfed7ccfb9fb2ba7b5110a869235a5edbbeb0228073a5cc3f2b923a88c4ba42955dcf2689e53c2ba7bdb08bf20bb0ae53610055228318de8a5843e6094035b6ea33ff237c6ca5b1d7483a234597fb2362c7492cca3939fe9776f4d1310946998f882fd466ffd46016602840a41e2d791e0c39c9ee1aea1aff84894b8b3127303bd015de036e0d9afd19429c74f66af9744059c9b057d94697cb26508e0ce3c44b9cf3c4fb9909ff287e12295c6568cee9e209b6a73c9c56bb8a1841508a9b6f4652cff8f67fdecc97f9ff32ea28a1ad3ee31b605cea7153c789c0511267a7564a238e072228e1b3bb24615de35ff04113339698765cd29fcc0a71dac2f9199941902a99e0466d523764b111f624a449da79dfcca655436fc12109cbc09c17f062ba5d12fe8f05596fd1fd08db4c2a596f3daeda25f481738957b994974518b7f61d0ff32b5bb2f1ab98b08bbd573dbbe8d8b0a6509979938156e5dd1de1e822a1ece7d799534fb88ab3aff012f2f340c63de639f5a333352d34a54d3cba25497cb9dbe3aa2b64518df9117124cbe34f38cce1bd44afa064f2cf41e9d9234540c34e5f23e450ee5fbf9b2f9ec16b7030d6bc28d090bac48b1e3d6a8a2dcf37295ba7a88e2e938220016774b67621c9090360fee3d9e7bd9e142913b110db21a95f58f5099c45fddc2dafac9f96bcb7fafeabb49f4aa2d631a6084ae716c37710fcc7dcf0f261f5e9602112115dec81cbd626630b6f4a0c075c99bbc506d10be038ea8e7a320845bc7114c2b490843f31255ecc206091ae3238cfeccd3d2a8eec69b0ff2be7437a3d6ec1a4e37cd5479ce396f8d9874d88dad6ee38fdc783f069bab095ac461353f4e4a20f5ef07830c3e1620f784b4f1f8ee42cee38b4cd3588ae9564702f31dedae2ddc0a748fd5878ba8d0f0e66b2f9fea9c1df2ac15a82cd7327e06e19ea6177ad2ce28781c446b8081c6b195d1e4f85d6a46c509807f4ffc8f6808fc0651adaeb468e0e984b385525956186a908be71b48ab30fe7ad5204e9294f0251d772aaa756c598b78bd4a5f9b922b561658c85a744002aac7a70f397e260a03854920eafb831975c8f9260f2f68e743d8ec8b163786262abe95bc82e962f698b4e1694015bdc95edb87e4ad3444adb64b36c1d464175d51c37da8964b355fe59525569669a1dd02d3d6b921ff0597588b9e34637e0ac77ec966e892d0e30d91fe49fc03f98003f126bddcad38a8d3bf199731515ee7dcffb1868a38e4e850"}, @INET_DIAG_REQ_BYTECODE={0xe, 0x1, "125b974df2694c64d6f8"}]}, 0x1060}, 0x1, 0x0, 0x0, 0x4004014}, 0x4048000)
ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000040))

3.803442038s ago: executing program 1 (id=787):
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x88347dd9bd9b5bf9, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x5b, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x80000002, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x102, 0x3, 0x5, 0x80000004000000, 0x2], 0xeeee0000, 0x12d7})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.713004154s ago: executing program 3 (id=788):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
read$hiddev(0xffffffffffffffff, &(0x7f0000000280)=""/54, 0x36)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='ub\xce\x00\x00\x00')
mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x2)
ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0)
ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000240)=0x1)
write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0x5)
write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5)

3.678331295s ago: executing program 2 (id=789):
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(0x0, 0x4, 0x0, 0x0, 0x0, 0xb201fffe)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c)
io_cancel(0x0, 0x0, 0x0)

3.382216522s ago: executing program 1 (id=790):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x8, 0x8, 0x8, 0xcfe, 0x3, 0x80000000, 0x8a5, 0x6, 0x10, 0x8, 0xb, 0x2, 0xf6cb, 0x6ab, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x7fffffff, 0x10000, 0x7, 0x0, 0x0, 0x7, 0x6, 0xfffffffe, 0x372b, 0x2, 0x1000, 0xfffffffa, 0x8, 0xae6, 0x6, 0xfffffffc, 0x1, 0x0, 0x7e, 0x8, 0x9d, 0x3, 0x240, 0x1, 0x7, 0x7, 0x6, 0x1000, 0x7, 0xb, 0x401, 0x789f, 0x7ff, 0x3, 0x8, 0x800, 0x9, 0x10000, 0x6, 0xff, 0x8, 0x8226, 0x400, 0x401, 0xc709, 0x7, 0x5, 0x3, 0x7, 0x10000, 0x4, 0x40, 0x8, 0xc1, 0x7, 0x3ff, 0x200, 0x1, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0xa, 0xfffffffc, 0x1, 0x0, 0x9, 0x2, 0x4, 0x2, 0xc, 0x7b, 0xff, 0x800, 0x4, 0x80, 0x5, 0x4, 0x5, 0x1000, 0x5, 0x7, 0x40, 0x8, 0x2, 0x6, 0x8226, 0xe, 0x81, 0x3, 0x5, 0x3800000, 0xf12, 0x0, 0x2, 0x8911, 0x9, 0x0, 0x9, 0x2, 0x0, 0x3, 0x8, 0x2, 0x2, 0x2, 0xd098, 0x9, 0x8, 0x3, 0xa, 0xf7, 0x4, 0x3, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0x81, 0xffff6660, 0x1, 0x3, 0x4, 0x0, 0x9, 0x3, 0x6, 0x5, 0xd7a, 0xfffffff9, 0x3, 0x8, 0x2, 0xfffffffd, 0x3864, 0x4, 0x7, 0x1, 0x4, 0x4c, 0x82ca, 0x4eeb, 0x6, 0xbdd, 0x5fdf, 0xc, 0x3, 0x10000, 0x9, 0x54, 0x8, 0x8, 0x800, 0x1ff, 0x9, 0xccc, 0x1, 0x7, 0x7ff, 0x2, 0xe, 0xc, 0xb, 0x80000001, 0x8001, 0x4, 0x9, 0xfffffffe, 0xfffffffa, 0x6, 0xb, 0x7ff, 0x1, 0x10, 0x2, 0x1, 0x4a0, 0x3, 0x0, 0x3ff, 0x9, 0x7, 0x1, 0x5, 0x7, 0x1, 0xfffffe01, 0x8001, 0x6, 0x3, 0x3, 0x9, 0x2, 0x4, 0x0, 0x1, 0x100, 0x4, 0x3, 0xffffff00, 0x6, 0x4, 0x3, 0x6, 0x5, 0x5c49, 0x7f, 0x7, 0x8cc7, 0x7, 0x0, 0x1, 0xcc99, 0x3, 0xb, 0x0, 0xffff, 0x0, 0xb64, 0x4, 0xf, 0x9, 0x77dc, 0x8, 0x1, 0x4, 0x7ff, 0x676, 0x10, 0x8, 0xffff, 0xfff, 0x8, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000)

2.658207365s ago: executing program 1 (id=791):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETS(r4, 0x89f0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x802, 0xd, "5dee0000005940090000000f00"})

2.582083359s ago: executing program 2 (id=792):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r2, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a")
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x6f, 0x3, 0x80, 0x40, 0x29, 0x0, 0x2e, 0x19}, {0xd000, 0x1, 0xc, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0xc0}, {0xdddd1000, 0x10000, 0xe, 0x9, 0x3, 0x8, 0xfe, 0x9, 0x5, 0xab, 0x5, 0x81}, {0x3000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x9, 0xff, 0x6, 0x7, 0xe}, {0x0, 0x9000, 0x9, 0x3, 0x7, 0x7, 0xab, 0x7f, 0x9e, 0x9, 0xf7, 0x83}, {0x1000, 0x80a0000, 0x10, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0x11, 0x40, 0xfd}, {0xeeed4004, 0x2, 0x0, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0x5000, 0x1000, 0x8, 0x5, 0xf, 0x7, 0xff, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x4000, 0x30}, {0x10000, 0x86}, 0x80000031, 0x0, 0x70000, 0x242101, 0xb, 0x0, 0xa000, [0x6840000000000000, 0x4, 0x5a, 0x100]})
r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x200001, 0x108, 0x10}, 0x18)
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r8=>r0, {0x14442cc7}}, './file0\x00'})
ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000140)={0x190, 0x640, 0x3c0, 0x280, 0x8, 0x5, 0x0, 0x0, {0x77, 0x6}, {0x0, 0x0, 0x1}, {0x6, 0x8}, {0x3ff, 0xfffff506, 0x1}, 0x2, 0x10, 0x3, 0x10001, 0x1, 0x38c2, 0x5, 0x3, 0x0, 0x7, 0x2, 0x0, 0x8, 0x200, 0x2, 0x4})
getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, &(0x7f0000000280))
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="c1", 0x1}], 0x1)
ioctl$SNDCTL_DSP_GETISPACE(r8, 0x8010500d, &(0x7f0000000340))

2.517296513s ago: executing program 3 (id=793):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.162231632s ago: executing program 1 (id=794):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r4, &(0x7f0000003900)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000008400000000000000ffff"], 0x18, 0x4}], 0x1, 0x40010)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x80000006, 0x4)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r6 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r6, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0)
ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})

1.079680437s ago: executing program 3 (id=795):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10)
io_getevents(0x0, 0x1, 0x0, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, 0x0, 0x0)
bind$tipc(r0, 0x0, 0x0)
close(r0)

944.701715ms ago: executing program 3 (id=796):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$TCSETSF2(r0, 0x89f2, &(0x7f0000000000)={0x9, 0x4, 0x8, 0x0, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x8})

757.324866ms ago: executing program 2 (id=797):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x3, 0x8, &(0x7f0000000100)="81839c93f294064c", 0x9, 0xb, 0x6, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

626.238083ms ago: executing program 3 (id=798):
r0 = socket$alg(0x26, 0x5, 0x0)
epoll_create1(0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x4, 0x6, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x398c191a, 0x5f, 0x9, 0x9, 0xffff2d37, 0xffffff01, 0x6, 0x20000003, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x24c74, 0x80000000, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0xfffffffe, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xa, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0xfffffffd, 0x7, 0x5, 0x800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x3, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0xfffffff6, 0xfe010000, 0xff7f, 0x2, 0x3ff, 0x9, 0x2, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x7, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1a, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x9, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0x8, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x1007d, 0x4005, 0x2, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000040), 0x36, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
bind$alg(r0, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @local}, 0x1c)
r4 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00')
read$FUSE(r4, &(0x7f00000082c0)={0x2020}, 0x2020)
read$FUSE(r4, 0x0, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0xfffd}}, 0x26)

127.888362ms ago: executing program 5 (id=799):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}, {0x4, 0x6e09, 0x24, &(0x7f0000000240)="043cb60a56e27a4c68b366d3e58181b5c34b74bee631798684f5a56d6532ffca5d36143f"}], 0x2})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x40, 0x18, 0x5, "97d1411a0a"}, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 0 (id=800):
madvise(&(0x7f0000d3a000/0x4000)=nil, 0x4000, 0x66)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x18)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
dup3(0xffffffffffffffff, r0, 0x0)
syz_usb_connect(0x0, 0xf5, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505240600010524007f000d240f0104000000080000000006241a03000a052404"], 0x0)

kernel console output (not intermixed with test programs):

ding state
[   72.221243][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.230409][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.239725][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.248949][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.258494][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.265652][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.276004][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.295814][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.348884][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.358506][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.379176][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.400364][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.409378][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.417529][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.429273][ T4186] device veth0_vlan entered promiscuous mode
[   72.440831][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.452726][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.485251][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.520966][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.531200][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.546566][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.560884][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.572836][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.585512][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.598629][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.610010][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.625634][ T4186] device veth1_vlan entered promiscuous mode
[   72.641892][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   72.651532][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   72.661740][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.670464][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.679666][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.694928][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.702731][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.712840][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.722971][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.731898][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.759721][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.783464][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   72.791316][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   72.828460][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.853100][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.863069][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.877218][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.890080][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.917575][ T4186] device veth0_macvtap entered promiscuous mode
[   72.941255][ T4186] device veth1_macvtap entered promiscuous mode
[   72.980085][ T4190] device veth0_vlan entered promiscuous mode
[   72.995508][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.009483][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.020339][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.031343][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.049867][ T4190] device veth1_vlan entered promiscuous mode
[   73.065332][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.083454][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.091717][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.105968][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   73.115723][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.125964][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.144557][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.156051][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.176662][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.204719][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.215263][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.224127][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.232857][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.243313][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.250835][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.261361][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   73.269989][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.278484][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.287193][ T4189] device veth0_vlan entered promiscuous mode
[   73.300403][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.310056][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.319727][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.329923][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.378313][ T4189] device veth1_vlan entered promiscuous mode
[   73.392334][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.416798][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.429407][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.438784][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.448745][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.462986][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.486924][ T4190] device veth0_macvtap entered promiscuous mode
[   73.523682][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.532177][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.545780][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.570832][ T4189] device veth0_macvtap entered promiscuous mode
[   73.580141][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.590060][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.610850][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.619059][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.628240][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.636977][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.657551][ T4190] device veth1_macvtap entered promiscuous mode
[   73.671237][ T4187] device veth0_vlan entered promiscuous mode
[   73.685802][ T4189] device veth1_macvtap entered promiscuous mode
[   73.694663][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.708905][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.717815][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.726512][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.735839][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.745972][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.759245][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.767585][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.793476][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.802084][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.816428][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.826835][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.835079][ T4187] device veth1_vlan entered promiscuous mode
[   73.844193][ T4188] device veth0_vlan entered promiscuous mode
[   73.852930][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   73.862158][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.871603][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.880409][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.899410][ T4188] device veth1_vlan entered promiscuous mode
[   73.926609][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.939210][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.951620][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.969234][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.989511][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.002178][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.016757][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.032924][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.046286][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   74.057666][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.065027][ T4261] Bluetooth: hci3: command 0x040f tx timeout
[   74.071594][ T4261] Bluetooth: hci4: command 0x040f tx timeout
[   74.078234][ T4261] Bluetooth: hci2: command 0x040f tx timeout
[   74.078261][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   74.084791][ T4261] Bluetooth: hci1: command 0x040f tx timeout
[   74.084877][ T4261] Bluetooth: hci0: command 0x040f tx timeout
[   74.098739][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.114630][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.123707][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.132408][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.145957][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.157578][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.169114][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.180023][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.189207][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.198511][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.207648][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.232527][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.252312][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.262525][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.277705][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.301565][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.316291][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.327577][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.346694][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.348311][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.351398][ T4188] device veth0_macvtap entered promiscuous mode
[   74.390010][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.391232][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.391886][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.395483][ T4188] device veth1_macvtap entered promiscuous mode
[   74.421061][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.421125][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.421151][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.421176][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.430739][ T4187] device veth0_macvtap entered promiscuous mode
[   74.455749][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.456496][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.457100][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.485868][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.485889][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.485899][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.485911][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.485924][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.485935][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.487201][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.489702][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.489719][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.489730][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.489742][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.489754][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.489766][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.490886][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.499102][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.714360][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.724041][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.734395][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.752620][ T4187] device veth1_macvtap entered promiscuous mode
[   74.791454][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.812133][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.821922][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.835695][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.928920][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.959073][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.979477][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.994415][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.005060][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.032266][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.043823][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.059042][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.082483][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.122660][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.193959][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.255941][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.276227][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.293769][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.340524][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.369756][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.400326][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.415270][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.436934][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.455005][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.467933][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.485694][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.510408][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.556512][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.574351][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.603441][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.621885][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.647821][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.676262][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.809502][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.862522][ T3073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.880618][ T3073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.916521][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.946379][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.955432][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.970989][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.004620][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.012681][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.058404][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.073005][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.080675][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.100015][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.116812][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.141100][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.149122][ T4261] Bluetooth: hci0: command 0x0419 tx timeout
[   76.164013][ T4261] Bluetooth: hci1: command 0x0419 tx timeout
[   76.170125][ T4261] Bluetooth: hci2: command 0x0419 tx timeout
[   76.177102][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.185745][ T4261] Bluetooth: hci4: command 0x0419 tx timeout
[   76.192227][ T4261] Bluetooth: hci3: command 0x0419 tx timeout
[   76.236255][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.255007][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.296707][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.321038][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.370631][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.428113][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.879670][ T4251] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   76.956721][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   77.052986][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   77.293484][ T4251] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   77.323285][ T4251] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   77.361705][ T4251] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[   77.407762][ T4251] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   77.438180][ T4251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.675075][ T4251] snd-usb-audio: probe of 3-1:27.0 failed with error -12
[   77.836479][ T4325] udevd[4325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   78.223786][   T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   78.493378][   T23] usb 5-1: Using ep0 maxpacket: 16
[   78.509607][ T4290] usb 3-1: USB disconnect, device number 2
[   78.653732][   T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   78.669563][   T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   78.670401][ T4331] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9'.
[   78.768970][ T4334] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9'.
[   78.853893][   T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   78.870079][ T4334] Zero length message leads to an empty skb
[   78.889523][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.900695][   T23] usb 5-1: Product: syz
[   78.917836][   T23] usb 5-1: Manufacturer: syz
[   78.927213][   T23] usb 5-1: SerialNumber: syz
[   79.090337][ T4345] device syzkaller0 entered promiscuous mode
[   79.264595][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   79.315801][   T23] usb 5-1: 0:2 : does not exist
[   79.399166][   T23] usb 5-1: USB disconnect, device number 2
[   79.430790][ T4355] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   79.577805][ T4360] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET)
[   79.663979][ T1108] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   79.685083][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   79.701095][ T1108] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   79.713796][ T1108] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[   79.743072][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   79.770179][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   79.904437][ T1108] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   80.002919][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   80.070192][ T1108] usb 4-1: Product: syz
[   80.105397][ T1108] usb 4-1: Manufacturer: syz
[   80.123877][ T4370] device ipip0 entered promiscuous mode
[   80.236449][ T1108] cdc_wdm 4-1:1.0: skipping garbage
[   80.243052][ T1108] cdc_wdm 4-1:1.0: skipping garbage
[   80.269174][ T1108] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[   80.278510][ T1108] cdc_wdm 4-1:1.0: Unknown control protocol
[   80.462147][ T1108] usb 4-1: USB disconnect, device number 2
[   80.636982][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   81.415450][ T4379] tipc: Failed to remove unknown binding: 66,0,0/0:3979810371/3979810372
[   81.460615][ T4379] tipc: Failed to remove unknown binding: 66,0,0/0:3979810371/3979810372
[   81.548429][ T4387] fuse: Unknown parameter 'group_id00000000000000000000'
[   84.403672][ T4245] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   84.786530][ T4245] usb 5-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config
[   84.807167][ T4245] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   84.873426][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   84.983673][ T4245] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   85.003324][ T4245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.017082][ T4245] usb 5-1: Product: syz
[   85.021411][ T4245] usb 5-1: Manufacturer: syz
[   85.033340][ T4245] usb 5-1: SerialNumber: syz
[   85.047995][ T4245] usb 5-1: config 0 descriptor??
[   85.113261][ T1108] usb 2-1: Using ep0 maxpacket: 32
[   85.152699][ T4426] tipc: Started in network mode
[   85.168256][ T4426] tipc: Node identity b6e4b099b9dc, cluster identity 4711
[   85.192276][ T4426] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.224858][ T4427] device syzkaller0 entered promiscuous mode
[   85.233484][ T1108] usb 2-1: config 0 has an invalid interface number: 76 but max is 0
[   85.241628][ T1108] usb 2-1: config 0 has no interface number 0
[   85.305960][ T4411] netlink: 56 bytes leftover after parsing attributes in process `syz.4.29'.
[   85.342158][ T4426] tipc: Resetting bearer <eth:syzkaller0>
[   85.372143][ T4425] tipc: Resetting bearer <eth:syzkaller0>
[   85.422984][ T4425] tipc: Disabling bearer <eth:syzkaller0>
[   85.433504][ T1108] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[   85.459210][ T4245] snd-usb-audio: probe of 5-1:0.0 failed with error -22
[   85.467437][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.518273][ T4245] usb 5-1: USB disconnect, device number 3
[   85.524308][ T1108] usb 2-1: Product: syz
[   85.533544][ T1108] usb 2-1: Manufacturer: syz
[   85.538488][ T1108] usb 2-1: SerialNumber: syz
[   85.614576][ T1108] usb 2-1: config 0 descriptor??
[   85.656411][ T1108] dw2102: su3000_identify_state
[   85.661334][ T1108] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[   85.681359][ T1108] dw2102: su3000_power_ctrl: 1, initialized 0
[   85.690299][ T1108] dvb-usb: bulk message failed: -22 (2/0)
[   85.725954][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   85.770286][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   85.774740][ T1108] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[   85.811155][ T1108] usb 2-1: media controller created
[   85.827383][ T1108] dvb-usb: bulk message failed: -22 (6/0)
[   85.836877][ T1108] dw2102: i2c transfer failed.
[   85.865475][ T4415] dvb-usb: bulk message failed: -22 (3/0)
[   85.896069][ T4415] dw2102: i2c transfer failed.
[   85.915017][ T4428] IPVS: sh: FWM 3 0x00000003 - no destination available
[   85.922583][ T4415] dvb-usb: bulk message failed: -22 (3/0)
[   85.935886][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[   85.952301][ T4415] dw2102: i2c transfer failed.
[   85.979455][ T4415] dvb-usb: bulk message failed: -22 (3/0)
[   85.994882][ T4415] dw2102: i2c transfer failed.
[   86.009700][ T1108] dvb-usb: bulk message failed: -22 (6/0)
[   86.015952][ T1108] dw2102: i2c transfer failed.
[   86.039227][ T1108] dvb-usb: bulk message failed: -22 (6/0)
[   86.057626][ T1108] dw2102: i2c transfer failed.
[   86.078706][ T1108] dvb-usb: bulk message failed: -22 (6/0)
[   86.111030][ T1108] dw2102: i2c transfer failed.
[   86.136972][ T1108] dvb-usb: bulk message failed: -22 (6/0)
[   86.158128][ T1108] dw2102: i2c transfer failed.
[   86.183584][ T1108] dvb-usb: bulk message failed: -22 (6/0)
[   86.198316][ T1108] dw2102: i2c transfer failed.
[   86.221016][ T1108] dvb-usb: MAC address: 02:02:02:02:02:02
[   86.289364][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   86.382426][ T1108] dvb-usb: bulk message failed: -22 (3/0)
[   86.408261][ T1108] dw2102: command 0x0e transfer failed.
[   86.432143][ T1108] dvb-usb: bulk message failed: -22 (3/0)
[   86.457276][ T1108] dw2102: command 0x0e transfer failed.
[   86.707792][   T13] cfg80211: failed to load regulatory.db
[   86.793437][ T1108] dvb-usb: bulk message failed: -22 (3/0)
[   86.799460][ T1108] dw2102: command 0x0e transfer failed.
[   86.885908][ T1108] dvb-usb: bulk message failed: -22 (3/0)
[   86.891777][ T1108] dw2102: command 0x0e transfer failed.
[   86.928229][ T1108] dvb-usb: bulk message failed: -22 (1/0)
[   86.938392][ T1108] dw2102: command 0x51 transfer failed.
[   87.109611][ T4450] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   87.109611][ T4450]    program syz.4.41 not setting count and/or reply_len properly
[   87.182318][ T1108] DVB: Unable to find symbol ds3000_attach()
[   87.195092][ T1108] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[   87.443494][ T1108] rc_core: IR keymap rc-su3000 not found
[   87.449288][ T1108] Registered IR keymap rc-empty
[   87.512541][ T1108] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[   87.619671][ T1108] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input5
[   87.678397][ T1108] dvb-usb: schedule remote query interval to 150 msecs.
[   87.721967][ T1108] dw2102: su3000_power_ctrl: 0, initialized 1
[   87.758243][ T1108] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[   87.876171][ T1108] usb 2-1: USB disconnect, device number 2
[   87.925215][   T13] dvb-usb: bulk message failed: -22 (1/0)
[   87.943071][   T13] dw2102: i2c transfer failed.
[   88.194886][ T1108] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[   89.015836][ T4464] tipc: Failed to remove unknown binding: 66,1,1/0:1806643916/1806643918
[   89.353325][   T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   89.643266][   T23] usb 3-1: Using ep0 maxpacket: 16
[   89.793441][   T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[   89.828712][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   89.846404][   T23] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[   89.907836][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   89.927499][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   89.972891][ T4473] device bridge_slave_0 left promiscuous mode
[   90.012522][ T4473] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.110066][ T4473] device bridge_slave_1 left promiscuous mode
[   90.124575][ T4473] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.153661][   T23] usb 3-1: string descriptor 0 read error: -22
[   90.162447][   T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   90.187833][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.220352][   T23] usb 3-1: rejected 1 configuration due to insufficient available bus power
[   90.270367][   T23] usb 3-1: no configuration chosen from 1 choice
[   90.335497][ T4473] bond0: (slave bond_slave_0): Releasing backup interface
[   90.435437][ T4473] bond0: (slave bond_slave_1): Releasing backup interface
[   90.578748][ T4473] team0: Port device team_slave_0 removed
[   90.685700][ T4473] team0: Port device team_slave_1 removed
[   90.692306][ T4473] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.780476][ T4473] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.861149][ T4473] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.942375][ T4473] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.040750][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.46'.
[   91.887452][ T1108] usb 3-1: USB disconnect, device number 3
[   92.530344][ T4510] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   92.643860][ T4510] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.651263][ T4510] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.333392][ T3520] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   93.421028][ T4574] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   93.613303][ T3520] usb 2-1: Using ep0 maxpacket: 32
[   93.734358][ T3520] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255
[   93.923397][ T1108] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   93.953626][ T3520] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   93.970836][ T3520] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   94.005420][ T3520] usb 2-1: Product: syz
[   94.019730][ T3520] usb 2-1: Manufacturer: syz
[   94.031383][ T3520] usb 2-1: SerialNumber: syz
[   94.066472][ T3520] usb 2-1: config 0 descriptor??
[   94.103621][ T4558] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   94.293636][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.332794][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.405377][ T1108] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[   94.422655][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.484906][ T1108] usb 3-1: config 0 descriptor??
[   94.563773][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   94.970314][ T1108] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[   95.000108][ T1108] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[   95.067488][ T1108] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[   95.177944][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   95.225461][ T1108] cp2112 0003:10C4:EA90.0001: Part Number: 0x1A Device Version: 0xC4
[   95.689973][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   95.850349][ T4583] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38
[   95.863546][ T1108] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71
[   95.899446][ T1108] usb 3-1: USB disconnect, device number 4
[   95.903708][ T4251] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   96.088552][ T4290] usb 2-1: USB disconnect, device number 3
[   96.150216][ T4608] fido_id[4608]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[   96.173501][ T4251] usb 5-1: Using ep0 maxpacket: 32
[   96.453496][ T4251] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[   96.473302][ T4290] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   96.483115][ T4251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.491595][ T4251] usb 5-1: Product: syz
[   96.496388][ T4251] usb 5-1: Manufacturer: syz
[   96.501093][ T4251] usb 5-1: SerialNumber: syz
[   96.517083][ T4251] usb 5-1: config 0 descriptor??
[   96.554814][ T4251] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[   96.584610][ T4251] dvb-usb: bulk message failed: -22 (4/0)
[   96.593811][ T4251] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[   96.613425][ T4251] dvb-usb: bulk message failed: -22 (5/0)
[   96.624386][ T4251] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[   96.649331][ T4251] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   96.675441][ T4251] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[   96.694787][ T4251] usb 5-1: media controller created
[   96.751434][ T4251] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   96.764386][ T4603] dvb-usb: bulk message failed: -22 (7/0)
[   96.779227][ T4603] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[   96.827109][ T4251] usb 5-1: selecting invalid altsetting 3
[   96.843411][ T4290] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   96.860705][ T4251] ttusb2: set interface to alts=3 failed
[   96.870300][ T4290] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   96.895024][ T4603] ttusb2: i2c transfer failed.
[   96.908327][ T4290] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   96.953593][ T4290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.993762][ T4251] DVB: Unable to find symbol tda10086_attach()
[   97.000045][ T4251] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[   97.008641][ T4610] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   97.053360][ T4251] dvb-usb: bulk message failed: -22 (4/0)
[   97.069962][ T4251] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[   97.167605][ T4251] dvb-usb: bulk message failed: -22 (5/0)
[   97.191589][ T4251] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[   97.242295][ T4251] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[   97.306761][ T4251] usb 5-1: USB disconnect, device number 4
[   97.378734][ T4251] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[   97.456858][ T4290] usb 2-1: USB disconnect, device number 4
[   97.932977][ T4655] sctp: [Deprecated]: syz.0.71 (pid 4655) Use of int in max_burst socket option deprecated.
[   97.932977][ T4655] Use struct sctp_assoc_value instead
[   98.119625][ T4662] fuse: Unknown parameter 'rPid:	0
[   98.119625][ T4662] Uid:	0	0	0	0
[   98.119625][ T4662] Gid:	0	0	0	0
[   98.119625][ T4662] FDSize:	256
[   98.119625][ T4662] Groups:	0 10 
[   98.119625][ T4662] NStgid:	46
[   98.119625][ T4662] NSpid:	47
[   98.119625][ T4662] NSpgid:	46
[   98.119625][ T4662] NSsid:	0
[   98.119625][ T4662] VmPeak:	  104236 kB
[   98.119625][ T4662] VmSize:	  104236 kB
[   98.119625][ T4662] VmLck:	       0 kB
[   98.119625][ T4662] VmPin:	       0 kB
[   98.119625][ T4662] VmHWM:	   23456 kB
[   98.119625][ T4662] VmRSS:	   23456 kB
[   98.119625][ T4662] RssAnon:	    1368 kB
[   98.119625][ T4662] RssFile:	   22088 kB
[   98.119625][ T4662] RssShmem:	       0 kB
[   98.119625][ T4662] VmData:	   36584 kB
[   98.119625][ T4662] VmStk:	     132 kB
[   98.119625][ T4662] VmExe:	    1768 kB
[   98.119625][ T4662] VmLib:	       8 kB
[   98.119625][ T4662] VmPTE:	     136 kB
[   98.119625][ T4662] VmSwap:	       0 kB
[   98.119625][ T4662] HugetlbPages:	       0 kB
[   98.211127][    C1] vkms_vblank_simulate: vblank timer overrun
[   98.603650][ T3520] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[   98.874722][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   98.993799][ T3520] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   99.009234][ T3520] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.038485][ T3520] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   99.233537][ T3520] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   99.253009][ T3520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.287523][ T3520] usb 2-1: Product: 㶸㍳쌽웹⃱夛䂩薻頲驠忞ꩵ೤絁ۺ亐땊뇧쓢ᗻឡ䶃啴寏᭷華꬐圁፜騆廕䂉
[   99.350321][ T3520] usb 2-1: Manufacturer: ъ
[   99.363147][ T3520] usb 2-1: SerialNumber: ࠄ
[  100.517626][ T4681] tipc: Failed to remove unknown binding: 66,1,1/0:1411865179/1411865181
[  100.813420][ T4251] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  100.913414][ T4290] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  101.073426][ T4251] usb 5-1: Using ep0 maxpacket: 16
[  101.273664][ T4251] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  101.295657][ T4251] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[  101.333493][ T4290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.344795][ T3520] usb 2-1: 0:2 : does not exist
[  101.402725][ T3520] usb 2-1: USB disconnect, device number 5
[  101.408684][ T4290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.493586][ T4290] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  101.516941][ T4290] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  101.532085][ T4290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.561863][ T4290] usb 1-1: config 0 descriptor??
[  101.703453][ T4251] usb 5-1: string descriptor 0 read error: -22
[  101.711187][ T4251] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  101.769312][ T4251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.789013][ T4251] usb 5-1: rejected 1 configuration due to insufficient available bus power
[  101.803322][ T4251] usb 5-1: no configuration chosen from 1 choice
[  102.036076][ T4290] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  102.078588][ T4702] process 'syz.2.82' launched './file0' with NULL argv: empty string added
[  102.097032][ T4700] xt_nat: multiple ranges no longer supported
[  102.224135][ T4290] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  103.267405][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[  103.276814][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[  103.286256][    C1] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1
[  104.024074][ T4726] fuse: Unknown parameter 'group_id00000000000000000000'
[  104.049445][ T1108] usb 5-1: USB disconnect, device number 5
[  104.142755][   T23] usb 1-1: USB disconnect, device number 2
[  104.225089][ T4729] tipc: Started in network mode
[  104.244372][ T4729] tipc: Node identity c648e4bb767b, cluster identity 4711
[  104.272360][ T4729] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.384134][ T4731] device syzkaller0 entered promiscuous mode
[  104.393769][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[  104.733518][ T4731] tipc: Resetting bearer <eth:syzkaller0>
[  104.779512][ T4731] tipc: Disabling bearer <eth:syzkaller0>
[  105.246477][ T4741] tipc: Failed to remove unknown binding: 66,0,0/0:2639730186/2639730187
[  105.286622][ T4741] tipc: Failed to remove unknown binding: 66,0,0/0:2639730186/2639730187
[  108.302252][ T4780] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.354440][ T4781] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  108.393747][ T4781] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.401175][ T4781] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.547214][ T4782] device syzkaller0 entered promiscuous mode
[  108.636601][ T4778] netlink: 'syz.2.100': attribute type 10 has an invalid length.
[  108.702254][ T4778] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.709526][ T4778] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.717983][ T4778] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.725162][ T4778] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.791260][ T4778] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  108.863131][ T4792] xt_nat: multiple ranges no longer supported
[  108.885987][ T4784] tipc: Resetting bearer <eth:syzkaller0>
[  108.932608][ T4784] tipc: Disabling bearer <eth:syzkaller0>
[  109.146689][ T4796] tipc: Failed to remove unknown binding: 66,0,0/0:1020804037/1020804038
[  109.194027][ T4796] tipc: Failed to remove unknown binding: 66,0,0/0:1020804037/1020804038
[  109.377130][   T26] audit: type=1326 audit(1769951799.358:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c2870eb9 code=0x7ffc0000
[  109.399252][    C0] vkms_vblank_simulate: vblank timer overrun
[  109.462478][   T26] audit: type=1326 audit(1769951799.388:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c2870eb9 code=0x7ffc0000
[  109.484562][    C0] vkms_vblank_simulate: vblank timer overrun
[  109.590053][   T26] audit: type=1326 audit(1769951799.388:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c2870eb9 code=0x7ffc0000
[  109.698318][   T26] audit: type=1326 audit(1769951799.388:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c2870eb9 code=0x7ffc0000
[  109.786657][   T26] audit: type=1326 audit(1769951799.388:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f15c2870eb9 code=0x7ffc0000
[  109.852244][   T26] audit: type=1326 audit(1769951799.388:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c2870eb9 code=0x7ffc0000
[  109.925457][   T26] audit: type=1326 audit(1769951799.388:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c2870eb9 code=0x7ffc0000
[  109.947656][    C0] vkms_vblank_simulate: vblank timer overrun
[  110.167537][   T26] audit: type=1326 audit(1769951799.388:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c2870eb9 code=0x7ffc0000
[  110.262872][   T26] audit: type=1326 audit(1769951799.398:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f15c2870eb9 code=0x7ffc0000
[  110.336307][   T26] audit: type=1326 audit(1769951799.408:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c2870eb9 code=0x7ffc0000
[  112.284159][ T4841] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.291727][ T4841] device syzkaller0 entered promiscuous mode
[  112.322008][ T4841] tipc: Resetting bearer <eth:syzkaller0>
[  112.330199][ T4840] tipc: Resetting bearer <eth:syzkaller0>
[  112.363323][ T1108] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[  112.393041][ T4840] tipc: Disabling bearer <eth:syzkaller0>
[  112.744123][ T4849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'.
[  112.755881][ T1108] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  112.775751][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  112.850376][ T1108] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  113.044449][ T1108] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  113.077831][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.143418][ T1108] usb 1-1: Product: 㶸㍳쌽웹⃱夛䂩薻頲驠忞ꩵ೤絁ۺ亐땊뇧쓢ᗻឡ䶃啴寏᭷華꬐圁፜騆廕䂉
[  113.223331][ T1108] usb 1-1: Manufacturer: ъ
[  113.233421][ T1108] usb 1-1: SerialNumber: ࠄ
[  114.157530][ T4877] usb usb8: usbfs: process 4877 (syz.1.127) did not claim interface 0 before use
[  114.451841][ T4886] Cannot find add_set index 0 as target
[  114.793559][ T4261] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  114.883544][ T1108] usb 1-1: 0:2 : does not exist
[  114.936395][ T1108] usb 1-1: USB disconnect, device number 3
[  115.044050][ T4261] usb 2-1: Using ep0 maxpacket: 16
[  115.163525][ T4261] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  115.180356][ T4261] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  115.363421][ T4261] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  115.389249][ T4261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.408912][ T4261] usb 2-1: Product: syz
[  115.417817][ T4261] usb 2-1: Manufacturer: syz
[  115.422468][ T4261] usb 2-1: SerialNumber: syz
[  115.773512][ T4261] usb 2-1: 0:2 : does not exist
[  115.874174][ T4261] usb 2-1: USB disconnect, device number 6
[  116.154500][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  116.751885][   T26] kauditd_printk_skb: 99 callbacks suppressed
[  116.751901][   T26] audit: type=1326 audit(1769951806.728:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e2314eb9 code=0x7ffc0000
[  116.790117][   T26] audit: type=1326 audit(1769951806.768:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e2314eb9 code=0x7ffc0000
[  116.818334][   T26] audit: type=1326 audit(1769951806.768:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87e2314eb9 code=0x7ffc0000
[  116.868278][   T26] audit: type=1326 audit(1769951806.768:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e2314eb9 code=0x7ffc0000
[  116.897864][   T26] audit: type=1326 audit(1769951806.768:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87e2314eb9 code=0x7ffc0000
[  116.925965][   T26] audit: type=1326 audit(1769951806.768:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e2314eb9 code=0x7ffc0000
[  116.952772][   T26] audit: type=1326 audit(1769951806.768:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87e2316747 code=0x7ffc0000
[  116.979818][   T26] audit: type=1326 audit(1769951806.768:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f87e22d578e code=0x7ffc0000
[  117.019568][   T26] audit: type=1326 audit(1769951806.838:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f87e22d578e code=0x7ffc0000
[  117.047563][   T26] audit: type=1326 audit(1769951806.838:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f87e22d578e code=0x7ffc0000
[  118.495158][ T4927] tipc: Failed to remove unknown binding: 66,0,0/0:771135939/771135940
[  119.227331][ T4947] binder: 4946:4947 ioctl ab03 0 returned -22
[  119.262628][ T4947] binder: 4946:4947 ioctl 400454cd 324 returned -22
[  119.613309][   T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  119.675524][ T4261] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  119.874249][ T4965] tipc: Failed to remove unknown binding: 66,0,0/0:1400643102/1400643103
[  119.893267][   T23] usb 3-1: Using ep0 maxpacket: 16
[  120.013516][   T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.033460][ T4261] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  120.055506][ T4261] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3
[  120.095753][ T4261] usb 1-1: config 220 interface 0 has no altsetting 0
[  120.106172][   T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  120.283605][ T4261] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  120.299801][ T4261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.322347][ T4261] usb 1-1: Product: syz
[  120.332358][ T4261] usb 1-1: Manufacturer: syz
[  120.342947][ T4261] usb 1-1: SerialNumber: syz
[  120.383669][   T23] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  120.392814][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.516406][   T23] usb 3-1: Product: syz
[  120.551085][   T23] usb 3-1: Manufacturer: syz
[  120.586561][   T23] usb 3-1: SerialNumber: syz
[  120.763453][ T4261] usb 1-1: Found UVC 0.00 device syz (8086:0b07)
[  120.780129][ T4261] usb 1-1: No valid video chain found.
[  120.820804][ T4261] usb 1-1: USB disconnect, device number 4
[  120.821179][ T4976] crypto_alloc_aead failed rc=-4
[  120.963715][   T23] usb 3-1: 0:2 : does not exist
[  121.033508][   T23] usb 3-1: USB disconnect, device number 5
[  121.285397][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  121.572541][ T4997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'.
[  122.543680][ T4251] usb 3-1: new low-speed USB device number 6 using dummy_hcd
[  122.953837][ T4251] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  122.966958][ T4251] usb 3-1: config 0 has no interface number 0
[  122.993368][ T4251] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  123.066920][ T4251] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  123.096117][ T4251] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  123.138614][ T4251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.241094][ T4251] usb 3-1: config 0 descriptor??
[  123.283664][ T5015] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  123.318603][ T4251] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  123.593692][ T4251] usb 3-1: USB disconnect, device number 6
[  123.733474][ T5044] tipc: Started in network mode
[  123.739051][ T5044] tipc: Node identity 661c35fbc406, cluster identity 4711
[  123.753396][ T5044] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.821766][ T5042] tipc: Resetting bearer <eth:syzkaller0>
[  123.986143][ T5042] tipc: Disabling bearer <eth:syzkaller0>
[  124.856868][ T4261] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  125.233591][ T4261] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  125.250600][ T4261] usb 3-1: config 0 has no interface number 0
[  125.413494][ T4261] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  125.422861][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.473394][ T4261] usb 3-1: Product: syz
[  125.477737][ T4261] usb 3-1: Manufacturer: syz
[  125.482466][ T4261] usb 3-1: SerialNumber: syz
[  125.532334][ T4261] usb 3-1: config 0 descriptor??
[  125.793490][ T4261] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  125.816852][ T4261] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  125.839992][ T4261] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  125.879368][ T4261] usb 3-1: media controller created
[  125.936352][ T4261] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  126.366414][ T5085] tipc: Started in network mode
[  126.371618][ T5085] tipc: Node identity e24d6c1ece96, cluster identity 4711
[  126.379491][ T5085] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.388842][ T5085] device syzkaller0 entered promiscuous mode
[  126.438370][ T5085] tipc: Resetting bearer <eth:syzkaller0>
[  126.451397][ T5084] tipc: Resetting bearer <eth:syzkaller0>
[  126.480145][ T5084] tipc: Disabling bearer <eth:syzkaller0>
[  126.663568][ T5092] Cannot find add_set index 0 as target
[  127.150060][ T5099] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  127.173568][ T4261] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  127.441513][ T4261] usb 3-1: USB disconnect, device number 7
[  129.159471][ T5113] chnl_net:caif_netlink_parms(): no params data found
[  129.472158][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.585353][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.680213][ T5113] device bridge_slave_0 entered promiscuous mode
[  129.726153][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.761518][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.820193][ T5113] device bridge_slave_1 entered promiscuous mode
[  130.017047][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.065377][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.348139][ T5113] team0: Port device team_slave_0 added
[  130.383526][ T4290] Bluetooth: hci5: command 0x0409 tx timeout
[  130.462600][ T5113] team0: Port device team_slave_1 added
[  130.581600][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.603259][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.733444][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.779540][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.798748][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.871759][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.906213][ T5152] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  130.993669][ T5113] device hsr_slave_0 entered promiscuous mode
[  131.010917][ T5113] device hsr_slave_1 entered promiscuous mode
[  131.021463][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  131.040819][ T5113] Cannot create hsr debugfs directory
[  131.231389][ T5155] device wg1 entered promiscuous mode
[  131.617263][ T5113] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  131.662666][ T5113] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  131.701417][ T5113] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  131.743716][ T5113] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  131.917618][ T5149] syz.0.197 (5149): drop_caches: 2
[  132.463538][ T4251] Bluetooth: hci5: command 0x041b tx timeout
[  132.763631][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.787956][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  132.796285][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  132.856557][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  132.927876][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  132.967718][ T5113] 8021q: adding VLAN 0 to HW filter on device team0
[  132.988286][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  133.007218][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  133.052237][ T4544] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.059437][ T4544] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.187055][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  133.261644][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  133.384557][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  133.476008][ T4544] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.483265][ T4544] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.598736][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  133.709795][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  133.830536][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  133.879111][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  133.893617][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  133.923371][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  133.974767][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  133.983903][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  134.010289][ T5113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  134.032158][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  134.072051][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  134.094885][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  134.118913][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  134.513382][ T1108] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  134.543554][ T4251] Bluetooth: hci5: command 0x040f tx timeout
[  134.746230][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  134.763518][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  134.780589][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.787976][ T1108] usb 3-1: Using ep0 maxpacket: 16
[  134.913666][ T1108] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  134.942069][ T1108] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  135.133655][ T1108] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  135.177678][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.195855][ T1108] usb 3-1: Product: syz
[  135.200199][ T1108] usb 3-1: Manufacturer: syz
[  135.239562][ T1108] usb 3-1: SerialNumber: syz
[  135.302045][ T5220] device wg1 entered promiscuous mode
[  135.542364][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  135.551947][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  135.633599][ T1108] usb 3-1: 0:2 : does not exist
[  135.665192][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  135.678073][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  135.700569][ T1108] usb 3-1: USB disconnect, device number 8
[  135.745143][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  135.765194][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  135.863461][ T5113] device veth0_vlan entered promiscuous mode
[  135.975735][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  136.079091][ T5113] device veth1_vlan entered promiscuous mode
[  136.275361][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  136.302871][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  136.327979][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  136.360473][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  136.437256][ T5113] device veth0_macvtap entered promiscuous mode
[  136.478782][ T5113] device veth1_macvtap entered promiscuous mode
[  136.541292][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.579176][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.630434][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.642253][ T4290] Bluetooth: hci5: command 0x0419 tx timeout
[  136.667010][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.689993][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.719125][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.731708][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.755506][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.779650][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.815957][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  136.838277][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  136.888453][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  136.916010][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  136.939901][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.981896][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.013390][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.069579][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.092084][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.129752][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.161333][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.191349][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.280667][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.326046][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  137.359117][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  137.425547][ T5113] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.458216][ T5113] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.475846][ T5113] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.493358][ T5113] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.831289][ T4539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.902354][ T4539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.930434][ T3073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.949081][ T3073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.990452][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  138.069761][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  138.775852][ T5285] device wg1 entered promiscuous mode
[  139.423459][   T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  139.603386][   T13] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  139.673362][   T23] usb 2-1: Using ep0 maxpacket: 32
[  139.793483][   T23] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  139.863925][   T23] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping
[  139.883383][   T13] usb 6-1: Using ep0 maxpacket: 32
[  139.907068][   T23] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  140.013425][   T13] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  140.133699][   T23] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  140.179983][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.223541][   T23] usb 2-1: Product: syz
[  140.227738][   T23] usb 2-1: Manufacturer: syz
[  140.243350][   T13] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  140.262870][   T23] usb 2-1: SerialNumber: syz
[  140.288308][   T13] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  140.327120][   T23] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  140.353265][   T13] usb 6-1: Product: syz
[  140.357493][   T13] usb 6-1: Manufacturer: syz
[  140.358040][   T23] imon 2-1:155.0: unable to initialize intf0, err -19
[  140.362113][   T13] usb 6-1: SerialNumber: syz
[  140.442014][   T23] imon:imon_probe: failed to initialize context!
[  140.466523][   T13] usb 6-1: config 0 descriptor??
[  140.482879][   T23] imon 2-1:155.0: unable to register, err -19
[  140.489506][ T5306] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  140.524000][   T13] hub 6-1:0.0: bad descriptor, ignoring hub
[  140.533079][   T13] hub: probe of 6-1:0.0 failed with error -5
[  140.846471][   T23] usb 6-1: USB disconnect, device number 2
[  141.163429][   T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  141.230157][ T5340] mmap: syz.2.232 (5340) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  141.313326][   T23] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  141.523439][   T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.548242][   T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.586066][   T13] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  141.605002][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.637458][   T13] usb 4-1: config 0 descriptor??
[  141.733334][   T23] usb 1-1: config 0 has an invalid interface number: 46 but max is 0
[  141.751503][   T23] usb 1-1: config 0 has no interface number 0
[  141.769329][   T23] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  141.783286][   T23] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  141.953582][   T23] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  142.006117][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.024168][   T23] usb 1-1: Product: syz
[  142.043394][   T23] usb 1-1: Manufacturer: syz
[  142.052550][   T23] usb 1-1: SerialNumber: syz
[  142.092041][   T23] usb 1-1: config 0 descriptor??
[  142.176352][   T23] ums-karma 1-1:0.46: USB Mass Storage device detected
[  142.299315][   T23] ums-karma: probe of 1-1:0.46 failed with error -5
[  142.398833][ T4251] usb 1-1: USB disconnect, device number 5
[  142.459509][ T3931] usb 2-1: USB disconnect, device number 7
[  144.223524][   T13] usbhid 4-1:0.0: can't add hid device: -71
[  144.229839][   T13] usbhid: probe of 4-1:0.0 failed with error -71
[  144.295751][   T13] usb 4-1: USB disconnect, device number 3
[  144.314516][ T5397] xt_hashlimit: size too large, truncated to 1048576
[  145.246502][ T5418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'.
[  145.573298][   T13] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  145.823396][   T13] usb 3-1: Using ep0 maxpacket: 32
[  145.943542][   T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.968685][   T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.989666][   T13] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  145.999137][   T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.019970][   T13] usb 3-1: config 0 descriptor??
[  146.528462][   T13] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  147.129577][   T23] usb 3-1: USB disconnect, device number 9
[  147.242293][ T5430] binder: 5429:5430 ioctl ab03 0 returned -22
[  147.257379][ T5430] binder: 5429:5430 ioctl 400454cd 324 returned -22
[  147.403345][ T3520] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  147.543476][   T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  147.793471][   T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  147.801392][ T3520] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  147.816583][ T3520] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  147.828855][ T3520] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  147.839471][ T3520] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  147.850798][ T3520] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  147.913667][   T13] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  147.940395][   T13] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3
[  147.967212][   T13] usb 4-1: config 220 interface 0 has no altsetting 0
[  148.004407][ T3520] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  148.016744][ T3520] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  148.033215][ T3520] usb 2-1: Product: syz
[  148.043371][ T3520] usb 2-1: Manufacturer: syz
[  148.105965][ T3520] cdc_wdm 2-1:1.0: skipping garbage
[  148.111238][ T3520] cdc_wdm 2-1:1.0: skipping garbage
[  148.136777][ T3520] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  148.142757][ T3520] cdc_wdm 2-1:1.0: Unknown control protocol
[  148.146444][   T13] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  148.164642][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.178312][   T13] usb 4-1: Product: syz
[  148.182714][   T13] usb 4-1: Manufacturer: syz
[  148.189379][   T13] usb 4-1: SerialNumber: syz
[  148.234614][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.253199][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.262999][   T23] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  148.293213][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.314187][   T23] usb 1-1: config 0 descriptor??
[  148.594675][   T13] usb 4-1: Found UVC 0.00 device syz (8086:0b07)
[  148.621350][   T13] usb 4-1: No valid video chain found.
[  148.638263][   T13] usb 4-1: USB disconnect, device number 4
[  148.888292][ T3520] usb 2-1: USB disconnect, device number 8
[  149.293891][ T5458] QAT: failed to copy from user.
[  151.057881][ T5476] program syz.5.262 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  151.911826][ T5485] tipc: Started in network mode
[  151.937919][ T5485] tipc: Node identity e204e4d911dc, cluster identity 4711
[  151.971465][ T5485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.002262][ T5488] device syzkaller0 entered promiscuous mode
[  152.066599][ T5485] tipc: Resetting bearer <eth:syzkaller0>
[  152.094073][   T23] usbhid 1-1:0.0: can't add hid device: -71
[  152.100256][   T23] usbhid: probe of 1-1:0.0 failed with error -71
[  152.159907][   T23] usb 1-1: USB disconnect, device number 6
[  152.248560][ T5484] tipc: Resetting bearer <eth:syzkaller0>
[  152.275701][ T5484] tipc: Disabling bearer <eth:syzkaller0>
[  152.613264][   T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  152.912699][ T5497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.270'.
[  152.966166][ T5497] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  152.983327][   T23] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  153.007019][   T23] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  153.033976][   T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  153.055756][ T5497] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING
[  153.073365][   T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  153.117937][   T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  153.283447][   T23] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  153.302805][   T23] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  153.329354][ T5507] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  153.329354][ T5507] The task syz.3.272 (5507) triggered the difference, watch for misbehavior.
[  153.356529][   T23] usb 1-1: Product: syz
[  153.374159][   T23] usb 1-1: Manufacturer: syz
[  153.464678][   T23] cdc_wdm 1-1:1.0: skipping garbage
[  153.473901][   T23] cdc_wdm 1-1:1.0: skipping garbage
[  153.489936][   T23] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  153.510106][   T23] cdc_wdm 1-1:1.0: Unknown control protocol
[  153.588858][ T5511] fuse: Bad value for 'fd'
[  154.545055][   T23] usb 1-1: USB disconnect, device number 7
[  154.750808][ T5528] binder: 5527:5528 ioctl ab03 0 returned -22
[  154.771332][ T5528] binder: 5527:5528 ioctl 400454cd 324 returned -22
[  155.083393][   T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  155.453315][   T13] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  155.512700][   T13] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3
[  155.532874][   T13] usb 4-1: config 220 interface 0 has no altsetting 0
[  155.721917][ T5544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.285'.
[  155.733463][   T13] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  155.761585][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.792085][   T13] usb 4-1: Product: syz
[  155.802268][   T13] usb 4-1: Manufacturer: syz
[  155.812658][   T13] usb 4-1: SerialNumber: syz
[  156.043255][ T3520] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  156.213467][   T13] usb 4-1: Found UVC 0.00 device syz (8086:0b07)
[  156.224016][   T13] usb 4-1: No valid video chain found.
[  156.268740][   T13] usb 4-1: USB disconnect, device number 5
[  156.333362][ T3520] usb 6-1: Using ep0 maxpacket: 32
[  156.485014][ T3520] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.522581][ T3520] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.564961][ T3520] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  156.586182][ T3520] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.646505][ T3520] usb 6-1: config 0 descriptor??
[  157.156172][ T3520] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0
[  157.415658][ T4245] usb 6-1: USB disconnect, device number 3
[  157.576486][ T5565] fido_id[5565]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  158.350005][ T5581] binder: 5580:5581 ioctl ab03 0 returned -22
[  158.408932][ T5581] binder: 5580:5581 ioctl 400454cd 324 returned -22
[  158.713318][   T13] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  159.093370][   T13] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  159.153357][   T13] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3
[  159.223203][   T13] usb 6-1: config 220 interface 0 has no altsetting 0
[  159.423851][   T13] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  159.454303][   T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.503267][   T13] usb 6-1: Product: syz
[  159.507492][   T13] usb 6-1: Manufacturer: syz
[  159.552778][   T13] usb 6-1: SerialNumber: syz
[  159.993387][   T13] usb 6-1: Found UVC 0.00 device syz (8086:0b07)
[  160.003328][   T13] usb 6-1: No valid video chain found.
[  160.029179][   T13] usb 6-1: USB disconnect, device number 4
[  160.579086][ T5615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.307'.
[  160.924431][   T13] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  161.069876][ T5628] binder: 5627:5628 ioctl c0306201 200000000540 returned -14
[  161.183423][   T13] usb 6-1: Using ep0 maxpacket: 32
[  161.303558][   T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.342695][   T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.510830][   T13] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  161.578802][   T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.640501][   T13] usb 6-1: config 0 descriptor??
[  162.129360][   T13] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0
[  163.584922][ T4245] usb 6-1: reset high-speed USB device number 5 using dummy_hcd
[  163.713349][ T1108] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  163.993255][ T1108] usb 2-1: Using ep0 maxpacket: 16
[  164.040365][ T5670] binder: 5664:5670 ioctl 400c620e 200000000100 returned -22
[  164.113496][ T1108] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.173076][ T1108] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  164.316057][ T5673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.324'.
[  164.476346][ T3931] usb 6-1: USB disconnect, device number 5
[  164.493531][ T1108] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  164.550703][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.570784][ T5678] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  164.649243][ T1108] usb 2-1: Product: syz
[  164.665294][ T1108] usb 2-1: Manufacturer: syz
[  164.678768][ T1108] usb 2-1: SerialNumber: syz
[  165.013683][ T1108] usb 2-1: 0:2 : does not exist
[  165.111794][ T1108] usb 2-1: USB disconnect, device number 9
[  165.355891][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  165.582644][ T5695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'.
[  165.873687][ T4251] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  166.153245][ T4251] usb 1-1: Using ep0 maxpacket: 32
[  166.273708][ T4251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.295042][ T4251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.331738][ T4251] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  166.391766][ T4251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.454483][ T4251] usb 1-1: config 0 descriptor??
[  166.981688][ T4251] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  167.765373][ T5726] binder: 5725:5726 ioctl ab03 0 returned -22
[  167.817256][ T5727] binder: 5725:5727 ioctl 400454cd 324 returned -22
[  168.103266][ T4245] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  168.443404][ T3520] usb 1-1: reset high-speed USB device number 8 using dummy_hcd
[  168.503635][ T4245] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  168.521013][ T4245] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3
[  168.543259][ T4245] usb 6-1: config 220 interface 0 has no altsetting 0
[  168.703490][ T4245] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  168.712581][ T4245] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.824419][ T4245] usb 6-1: Product: syz
[  168.828642][ T4245] usb 6-1: Manufacturer: syz
[  168.914264][ T4245] usb 6-1: SerialNumber: syz
[  169.003681][ T4290] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  169.258397][ T5747] device syzkaller0 entered promiscuous mode
[  169.373407][ T4290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  169.409558][ T4290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  169.443399][ T4245] usb 6-1: Found UVC 0.00 device syz (8086:0b07)
[  169.449772][ T4245] usb 6-1: No valid video chain found.
[  169.464622][   T23] usb 1-1: USB disconnect, device number 8
[  169.573359][ T4290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  169.593642][ T4290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  169.621107][ T4245] usb 6-1: USB disconnect, device number 6
[  169.713463][ T4290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  169.733805][ T4290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  169.933363][ T4290] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9
[  169.956884][ T4290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.983379][ T4290] usb 2-1: Product: syz
[  169.993580][ T4290] usb 2-1: Manufacturer: syz
[  170.003626][ T4290] usb 2-1: SerialNumber: syz
[  170.024264][ T4290] usb 2-1: config 0 descriptor??
[  170.084549][ T4290] ti_usb_3410_5052 2-1:0.0: TI USB 5052 2 port adapter converter detected
[  170.110188][ T5756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.348'.
[  170.119565][ T4290] ti_usb_3410_5052 2-1:0.0: missing endpoints
[  170.632046][ T5768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'.
[  170.734203][ T5771] netlink: 'syz.0.352': attribute type 1 has an invalid length.
[  170.747879][ T5771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.352'.
[  170.953327][ T3520] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  171.203420][ T3520] usb 3-1: Using ep0 maxpacket: 32
[  171.233665][ T5784] binder: 5783:5784 ioctl ab03 0 returned -22
[  171.300837][ T5784] binder: 5783:5784 ioctl 400454cd 324 returned -22
[  171.323540][ T3520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.341391][ T3520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.369660][ T3520] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  171.396175][ T3520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.436075][ T3520] usb 3-1: config 0 descriptor??
[  171.549591][ T5789] Can't find ip_set type hash�{et,port
[  171.573377][ T3931] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  171.930885][ T3520] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  171.943550][ T3931] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  171.983292][ T3931] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3
[  172.023022][ T3931] usb 1-1: config 220 interface 0 has no altsetting 0
[  172.223732][ T3931] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  172.277015][ T3931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.334924][ T3931] usb 1-1: Product: syz
[  172.353307][ T3931] usb 1-1: Manufacturer: syz
[  172.370758][ T3931] usb 1-1: SerialNumber: syz
[  172.462569][ T4245] usb 2-1: USB disconnect, device number 10
[  172.601508][ T5796] netlink: 'syz.1.358': attribute type 1 has an invalid length.
[  172.787110][ T5798] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  172.813345][ T3931] usb 1-1: Found UVC 0.00 device syz (8086:0b07)
[  172.820980][ T3931] usb 1-1: No valid video chain found.
[  172.842701][ T3931] usb 1-1: USB disconnect, device number 9
[  172.847464][ T5798] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  172.859359][ T5798] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  172.869351][ T5798] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  172.891460][ T5798] bond1: (slave geneve2): making interface the new active one
[  172.911263][ T5798] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  172.931273][ T5798] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  172.940415][ T5800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.358'.
[  172.958821][ T5800] 8021q: adding VLAN 0 to HW filter on device bond1
[  172.978436][ T5798] syz.1.358 (5798) used greatest stack depth: 19352 bytes left
[  173.293854][   T23] usb 3-1: reset high-speed USB device number 10 using dummy_hcd
[  174.089956][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.098518][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.515925][ T3520] usb 3-1: USB disconnect, device number 10
[  176.012007][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.125474][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.144377][ T5849] Can't find ip_set type hash�{et,port
[  177.329163][ T5806] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.339020][ T5806] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.348254][ T5806] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.357531][ T5806] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.502502][ T5854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.373'.
[  177.541825][ T5806] syz.5.362 (5806) used greatest stack depth: 19312 bytes left
[  177.688380][ T5866] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.742658][ T5871] device syzkaller0 entered promiscuous mode
[  177.752372][ T5861] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  177.802864][ T5863] tipc: Resetting bearer <eth:syzkaller0>
[  177.846492][ T5863] tipc: Disabling bearer <eth:syzkaller0>
[  178.098873][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  178.099052][   T26] audit: type=1326 audit(1769951868.078:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f4e5aeb9 code=0x7ffc0000
[  178.200352][ T5886] Can't find ip_set type hash�{et,port
[  178.351121][ T5896] tipc: Failed to remove unknown binding: 66,1,1/0:3711180883/3711180884
[  178.364030][   T26] audit: type=1326 audit(1769951868.078:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f4e5aeb9 code=0x7ffc0000
[  178.387964][   T26] audit: type=1326 audit(1769951868.168:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95f4e5aeb9 code=0x7ffc0000
[  178.414365][   T26] audit: type=1326 audit(1769951868.168:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f4e5aeb9 code=0x7ffc0000
[  178.443881][   T26] audit: type=1326 audit(1769951868.168:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f4e5aeb9 code=0x7ffc0000
[  178.476074][   T26] audit: type=1326 audit(1769951868.178:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f95f4e5aeb9 code=0x7ffc0000
[  178.504975][   T26] audit: type=1326 audit(1769951868.188:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f4e5aeb9 code=0x7ffc0000
[  178.587736][   T26] audit: type=1326 audit(1769951868.198:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f4e5aeb9 code=0x7ffc0000
[  180.788873][ T5923] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  180.878325][ T5928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.905652][ T5928] device syzkaller0 entered promiscuous mode
[  180.983809][ T5927] tipc: Resetting bearer <eth:syzkaller0>
[  181.072828][ T5927] tipc: Disabling bearer <eth:syzkaller0>
[  182.837983][ T5978] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.875122][ T5978] device syzkaller0 entered promiscuous mode
[  182.924545][ T5979] QAT: failed to copy from user.
[  182.939079][ T5974] tipc: Resetting bearer <eth:syzkaller0>
[  183.037775][ T5974] tipc: Disabling bearer <eth:syzkaller0>
[  184.126617][ T5987] netlink: 830 bytes leftover after parsing attributes in process `syz.2.410'.
[  184.147672][ T5987] device veth0_to_bond entered promiscuous mode
[  185.136892][ T6012] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.162770][ T6015] =======================================================
[  185.162770][ T6015] WARNING: The mand mount option has been deprecated and
[  185.162770][ T6015]          and is ignored by this kernel. Remove the mand
[  185.162770][ T6015]          option from the mount to silence this warning.
[  185.162770][ T6015] =======================================================
[  185.205364][ T6012] tipc: Resetting bearer <eth:syzkaller0>
[  185.225875][ T6011] tipc: Disabling bearer <eth:syzkaller0>
[  185.283019][ T6016] device syzkaller0 entered promiscuous mode
[  185.940718][ T6044] QAT: failed to copy from user.
[  187.029020][ T6080] device syzkaller0 entered promiscuous mode
[  187.907186][ T6102] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.940934][ T6102] tipc: Resetting bearer <eth:syzkaller0>
[  187.970712][ T6100] tipc: Disabling bearer <eth:syzkaller0>
[  188.422684][ T6124] device syzkaller0 entered promiscuous mode
[  188.637735][ T6136] binder: 6134:6136 ioctl ab03 0 returned -22
[  188.933240][ T5828] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  189.333588][ T5828] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  189.383690][ T5828] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3
[  189.439775][ T5828] usb 2-1: config 220 interface 0 has no altsetting 0
[  189.653551][ T5828] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  189.671904][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.728818][ T5828] usb 2-1: Product: syz
[  189.758566][ T5828] usb 2-1: Manufacturer: syz
[  189.783280][ T5828] usb 2-1: SerialNumber: syz
[  190.036881][ T6172] tipc: Failed to remove unknown binding: 66,0,0/0:778713838/778713839
[  190.083663][ T6172] tipc: Failed to remove unknown binding: 66,0,0/0:778713838/778713839
[  190.136511][ T6174] device syzkaller0 entered promiscuous mode
[  190.243468][ T5828] usb 2-1: Found UVC 0.00 device syz (8086:0b07)
[  190.249881][ T5828] usb 2-1: No valid video chain found.
[  190.301838][ T5828] usb 2-1: USB disconnect, device number 11
[  190.752272][ T6179] device syzkaller0 entered promiscuous mode
[  190.992318][ T6194] tipc: Failed to remove unknown binding: 66,0,0/0:1826741506/1826741507
[  191.007894][ T6194] tipc: Failed to remove unknown binding: 66,0,0/0:1826741506/1826741507
[  191.052252][ T6200] binder: 6199:6200 ioctl ab03 0 returned -22
[  191.141610][ T6207] netlink: 'syz.1.493': attribute type 12 has an invalid length.
[  191.160169][ T6207] netlink: 132 bytes leftover after parsing attributes in process `syz.1.493'.
[  191.183342][ T4261] Bluetooth: hci1: command 0x0406 tx timeout
[  191.189469][ T4261] Bluetooth: hci0: command 0x0406 tx timeout
[  191.194052][ T5828] Bluetooth: hci2: command 0x0406 tx timeout
[  191.203272][ T5828] Bluetooth: hci4: command 0x0406 tx timeout
[  191.221780][ T5828] Bluetooth: hci3: command 0x0406 tx timeout
[  191.413286][ T4245] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  191.472764][ T6221] netlink: 176 bytes leftover after parsing attributes in process `syz.2.498'.
[  191.608659][ T6225] tipc: Failed to remove unknown binding: 66,0,0/0:870811806/870811807
[  191.617974][ T6225] tipc: Failed to remove unknown binding: 66,0,0/0:870811806/870811807
[  191.643262][ T5828] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  191.813520][ T4245] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  191.848683][ T4245] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3
[  191.872436][ T4245] usb 4-1: config 220 interface 0 has no altsetting 0
[  191.923421][ T5828] usb 1-1: Using ep0 maxpacket: 16
[  192.053690][ T4245] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  192.066551][ T4245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.083490][ T5828] usb 1-1: config 4 has an invalid interface number: 37 but max is 0
[  192.090936][ T4245] usb 4-1: Product: syz
[  192.099706][ T5828] usb 1-1: config 4 has no interface number 0
[  192.109252][ T5828] usb 1-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  192.109684][ T4245] usb 4-1: Manufacturer: syz
[  192.119340][ T5828] usb 1-1: config 4 interface 37 has no altsetting 0
[  192.181544][ T4245] usb 4-1: SerialNumber: syz
[  192.293537][ T5828] usb 1-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f
[  192.329745][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.431910][ T5828] usb 1-1: Product: syz
[  192.478878][ T5828] usb 1-1: Manufacturer: syz
[  192.520290][ T5828] usb 1-1: SerialNumber: syz
[  192.583774][ T6214] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  192.613402][ T4245] usb 4-1: Found UVC 0.00 device syz (8086:0b07)
[  192.625249][ T4245] usb 4-1: No valid video chain found.
[  192.681440][ T4245] usb 4-1: USB disconnect, device number 6
[  192.850028][ T5828] usb 1-1: USB disconnect, device number 10
[  193.466548][ T6245] Can't find ip_set type hash�{et,port
[  193.799556][ T6262] device syzkaller0 entered promiscuous mode
[  194.231311][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  194.240378][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  194.772049][ T6295] device syzkaller0 entered promiscuous mode
[  195.321890][ T6314] tipc: Failed to remove unknown binding: 66,1,1/0:587808053/587808055
[  196.608774][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'.
[  196.905581][ T6343] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  197.293305][ T5828] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  197.553440][ T5828] usb 3-1: Using ep0 maxpacket: 16
[  197.614993][ T6378] tipc: Failed to remove unknown binding: 66,0,0/0:41884180/41884181
[  197.644296][ T6378] tipc: Failed to remove unknown binding: 66,0,0/0:41884180/41884181
[  197.673515][ T5828] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  197.703274][ T5828] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  197.904705][ T5828] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  197.975645][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.998314][ T5828] usb 3-1: Product: syz
[  198.002782][ T5828] usb 3-1: Manufacturer: syz
[  198.012529][ T5828] usb 3-1: SerialNumber: syz
[  198.353435][ T5828] usb 3-1: 0:2 : does not exist
[  198.406260][ T5828] usb 3-1: USB disconnect, device number 11
[  198.654137][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  198.871972][ T6414] tipc: Failed to remove unknown binding: 66,0,0/0:3268003763/3268003764
[  198.947950][ T6414] tipc: Failed to remove unknown binding: 66,0,0/0:3268003763/3268003764
[  198.982407][ T6415] tipc: Failed to remove unknown binding: 66,1,1/0:3955019824/3955019826
[  199.008876][ T6418] netlink: 316 bytes leftover after parsing attributes in process `syz.0.572'.
[  199.278037][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.575'.
[  199.725441][ T6432] bond0: (slave bridge0): Error: Slave device does not support XDP
[  199.800455][ T6434] netlink: 'syz.2.578': attribute type 10 has an invalid length.
[  199.879099][ T6434] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  200.114544][ T6437] Can't find ip_set type hash�{et,port
[  200.504548][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'.
[  200.568093][ T6450] netlink: 316 bytes leftover after parsing attributes in process `syz.1.584'.
[  200.568873][ T6449] tipc: Failed to remove unknown binding: 66,0,0/0:1162753399/1162753400
[  200.654639][ T6451] tipc: Failed to remove unknown binding: 66,0,0/0:1162753399/1162753400
[  200.813370][ T3520] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  201.073446][ T3520] usb 3-1: Using ep0 maxpacket: 32
[  201.193394][ T3520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.213739][ T3520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.257921][ T3520] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  201.326181][ T3520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.376018][ T3520] usb 3-1: config 0 descriptor??
[  201.724846][ T6486] netlink: 'syz.5.595': attribute type 10 has an invalid length.
[  201.950863][ T6491] tipc: Failed to remove unknown binding: 66,0,0/0:3066742628/3066742629
[  201.973577][ T3520] usbhid 3-1:0.0: can't add hid device: -71
[  201.980057][ T3520] usbhid: probe of 3-1:0.0 failed with error -71
[  202.017299][ T6491] tipc: Failed to remove unknown binding: 66,0,0/0:3066742628/3066742629
[  202.070303][ T3520] usb 3-1: USB disconnect, device number 12
[  202.269994][ T6500] netlink: 20 bytes leftover after parsing attributes in process `syz.5.601'.
[  202.603342][ T4261] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  202.853434][ T4261] usb 4-1: Using ep0 maxpacket: 16
[  202.919573][ T6520] netlink: 60 bytes leftover after parsing attributes in process `syz.2.618'.
[  202.939396][ T6518] netlink: 'syz.5.608': attribute type 10 has an invalid length.
[  202.973343][ T4261] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  202.999858][ T4261] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  203.064054][ T6520] netlink: 60 bytes leftover after parsing attributes in process `syz.2.618'.
[  203.132734][ T6521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.618'.
[  203.193512][ T4261] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  203.215465][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.273052][ T4261] usb 4-1: Product: syz
[  203.276381][ T6522] netlink: 60 bytes leftover after parsing attributes in process `syz.2.618'.
[  203.300966][ T6525] tipc: Failed to remove unknown binding: 66,0,0/0:1953723196/1953723197
[  203.312165][ T4261] usb 4-1: Manufacturer: syz
[  203.320417][ T4261] usb 4-1: SerialNumber: syz
[  203.328526][ T6525] tipc: Failed to remove unknown binding: 66,0,0/0:1953723196/1953723197
[  203.458738][ T6529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.609'.
[  203.683485][ T4261] usb 4-1: 0:2 : does not exist
[  203.780018][ T4261] usb 4-1: USB disconnect, device number 7
[  204.014336][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  204.583273][ T4245] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  204.761803][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.617'.
[  204.833222][ T4245] usb 4-1: Using ep0 maxpacket: 16
[  204.953647][ T4245] usb 4-1: config 4 has an invalid interface number: 37 but max is 0
[  204.967481][ T4245] usb 4-1: config 4 has no interface number 0
[  204.998142][ T6552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.008048][ T4245] usb 4-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  205.037261][ T6552] tipc: Resetting bearer <eth:syzkaller0>
[  205.048206][ T4245] usb 4-1: config 4 interface 37 has no altsetting 0
[  205.060277][ T6551] tipc: Disabling bearer <eth:syzkaller0>
[  205.066318][ T3520] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  205.263471][ T4245] usb 4-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f
[  205.283390][ T4245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.311861][ T4245] usb 4-1: Product: syz
[  205.323197][ T3520] usb 6-1: Using ep0 maxpacket: 32
[  205.336376][ T4245] usb 4-1: Manufacturer: syz
[  205.398126][ T4245] usb 4-1: SerialNumber: syz
[  205.443779][ T3520] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.467597][ T3520] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.523529][ T6542] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  205.561807][ T3520] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  205.619707][ T3520] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.651773][ T3520] usb 6-1: config 0 descriptor??
[  205.800791][ T6565] netlink: 60 bytes leftover after parsing attributes in process `syz.0.624'.
[  205.818101][ T6565] netlink: 60 bytes leftover after parsing attributes in process `syz.0.624'.
[  205.827901][ T4245] usb 4-1: USB disconnect, device number 8
[  205.843822][ T6565] netlink: 60 bytes leftover after parsing attributes in process `syz.0.624'.
[  206.183252][ T3520] usbhid 6-1:0.0: can't add hid device: -71
[  206.853320][ T3520] usbhid: probe of 6-1:0.0 failed with error -71
[  206.867407][ T3520] usb 6-1: USB disconnect, device number 7
[  207.944646][ T6593] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  208.363636][ T3520] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  208.773542][ T3520] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[  208.796499][ T3520] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  208.881549][ T3520] usb 4-1: config 0 has no interface number 0
[  208.900542][ T3520] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  208.927386][ T3520] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  209.223702][ T3520] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  209.253809][ T3520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.273829][ T3520] usb 4-1: Product: syz
[  209.278146][ T3520] usb 4-1: Manufacturer: syz
[  209.310626][ T3520] usb 4-1: SerialNumber: syz
[  209.525328][ T3520] usb 4-1: config 0 descriptor??
[  210.279934][ T4238] usb 4-1: USB disconnect, device number 9
[  210.335896][ T6638] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  210.373296][ T3520] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  210.643321][ T3520] usb 6-1: Using ep0 maxpacket: 16
[  210.773492][ T3520] usb 6-1: config 4 has an invalid interface number: 37 but max is 0
[  210.792398][ T3520] usb 6-1: config 4 has no interface number 0
[  210.829538][ T3520] usb 6-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  210.843253][ T5825] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  210.909253][ T3520] usb 6-1: config 4 interface 37 has no altsetting 0
[  211.050773][ T6648] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  211.093266][ T5825] usb 3-1: Using ep0 maxpacket: 16
[  211.104273][ T3520] usb 6-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f
[  211.139384][ T3520] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.168234][ T3520] usb 6-1: Product: syz
[  211.172465][ T3520] usb 6-1: Manufacturer: syz
[  211.213511][ T5825] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  211.253652][ T3520] usb 6-1: SerialNumber: syz
[  211.258498][ T5825] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  211.303503][ T6632] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  211.343223][ T6658] QAT: failed to copy from user.
[  211.473464][ T5825] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  211.531029][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.567232][ T3520] usb 6-1: USB disconnect, device number 8
[  211.679745][ T5825] usb 3-1: Product: syz
[  211.710306][ T5825] usb 3-1: Manufacturer: syz
[  211.738628][ T5825] usb 3-1: SerialNumber: syz
[  212.113423][ T5825] usb 3-1: 0:2 : does not exist
[  212.267006][ T5825] usb 3-1: USB disconnect, device number 13
[  212.595002][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  212.794558][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  213.039820][ T6688] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.094582][ T6688] bond0: (slave rose0): Enslaving as an active interface with an up link
[  213.216220][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  214.044530][ T6720] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  215.693334][ T4304] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  215.983418][ T4304] usb 6-1: Using ep0 maxpacket: 16
[  216.104871][ T4304] usb 6-1: config 4 has an invalid interface number: 37 but max is 0
[  216.123400][ T5825] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  216.134561][ T4304] usb 6-1: config 4 has no interface number 0
[  216.148543][ T6751] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  216.155547][ T6751] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  216.163176][ T4304] usb 6-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  216.203365][ T6751] vhci_hcd vhci_hcd.0: Device attached
[  216.205992][ T4304] usb 6-1: config 4 interface 37 has no altsetting 0
[  216.399341][ T5825] usb 3-1: Using ep0 maxpacket: 16
[  216.446685][ T4304] usb 6-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f
[  216.463409][ T4304] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.481697][ T4304] usb 6-1: Product: syz
[  216.490470][ T4304] usb 6-1: Manufacturer: syz
[  216.505533][ T4304] usb 6-1: SerialNumber: syz
[  216.513391][ T4245] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  216.521164][ T4238] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  216.544261][ T5825] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  216.555829][ T6727] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  216.564621][ T5825] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  216.780184][ T5825] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  216.803661][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.822305][ T5825] usb 3-1: Product: syz
[  216.837999][ T4304] usb 6-1: USB disconnect, device number 9
[  216.853425][ T5825] usb 3-1: Manufacturer: syz
[  216.875698][ T5825] usb 3-1: SerialNumber: syz
[  216.903380][ T4245] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  216.933211][ T4245] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  217.033444][ T4245] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  217.042614][ T4245] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  217.078649][ T4245] usb 4-1: Manufacturer: syz
[  217.102491][ T4245] usb 4-1: config 0 descriptor??
[  217.243619][ T5825] usb 3-1: 0:2 : does not exist
[  217.357494][ T4245] usb 4-1: USB disconnect, device number 10
[  217.364999][ T6753] usb 39-1: recv xbuf, 0
[  217.374593][ T3073] vhci_hcd: stop threads
[  217.379644][ T3073] vhci_hcd: release socket
[  217.382740][ T5825] usb 3-1: USB disconnect, device number 14
[  217.414996][ T3073] vhci_hcd: disconnect device
[  217.661244][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  217.693309][ T4261] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  217.943205][ T4261] usb 1-1: Using ep0 maxpacket: 16
[  218.063503][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.098672][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.192505][ T4261] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  218.291169][ T4261] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  218.368360][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.474670][ T4261] usb 1-1: config 0 descriptor??
[  218.975140][ T4261] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max
[  219.018915][ T4261] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  219.094116][ T4261] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  219.132438][ T4261] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  219.203276][ T4261] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  219.223695][ T4261] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  219.242255][ T6830] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  219.281853][ T4261] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0008/input/input7
[  219.572818][ T6841] QAT: failed to copy from user.
[  219.699279][ T4261] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  219.830952][ T4261] usb 1-1: USB disconnect, device number 11
[  220.149401][ T6848] fido_id[6848]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  220.521992][ T6867] __nla_validate_parse: 1 callbacks suppressed
[  220.522007][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'.
[  223.227597][ T6900] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  223.983517][ T5828] Bluetooth: hci3: command 0x201b tx timeout
[  224.408607][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'.
[  225.983320][ T3520] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  227.790550][ T3520] usb 1-1: Using ep0 maxpacket: 32
[  227.864017][ T3520] usb 1-1: device descriptor read/all, error -71
[  228.123385][ T4245] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  228.375387][ T4245] usb 2-1: Using ep0 maxpacket: 16
[  228.493501][ T4245] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  228.523183][ T4245] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  228.713405][ T4245] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  228.745619][ T4245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.803600][ T4245] usb 2-1: Product: syz
[  228.815960][ T6950] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  228.831547][ T4245] usb 2-1: Manufacturer: syz
[  228.853280][ T4245] usb 2-1: SerialNumber: syz
[  229.223530][ T4245] usb 2-1: 0:2 : does not exist
[  229.321895][ T4245] usb 2-1: USB disconnect, device number 12
[  229.407325][ T6970] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  229.775160][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  230.433519][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'.
[  230.783315][ T4261] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  231.113244][ T4261] usb 2-1: Using ep0 maxpacket: 32
[  231.236179][ T7000] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  231.543670][ T4261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.058437][ T7004] 9pnet: Insufficient options for proto=fd
[  232.259166][ T4261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.288231][ T4261] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  232.326814][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.620887][ T4261] usb 2-1: config 0 descriptor??
[  233.773623][ T4261] usb 2-1: can't set config #0, error -71
[  233.794095][ T4261] usb 2-1: USB disconnect, device number 13
[  234.000524][ T7037] CUSE: info not properly terminated
[  234.062008][ T7011] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  234.078271][ T7034] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  234.273199][ T7044] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  234.279779][ T7044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  234.359124][ T7044] vhci_hcd vhci_hcd.0: Device attached
[  234.584314][ T4261] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  234.613355][ T4238] usb 43-1: new low-speed USB device number 2 using vhci_hcd
[  235.573373][ T5828] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  235.814565][ T4261] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.823418][ T5828] usb 2-1: Using ep0 maxpacket: 16
[  235.843028][ T4261] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  235.973626][ T4261] usb 6-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  235.985484][ T5828] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  235.996651][ T4261] usb 6-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  236.016280][ T4261] usb 6-1: Manufacturer: syz
[  236.017088][ T5828] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  236.063760][ T4261] usb 6-1: config 0 descriptor??
[  236.085047][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'.
[  236.156939][ T7070] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  236.243470][ T5828] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  236.252580][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.293193][ T5828] usb 2-1: Product: syz
[  236.303837][ T5828] usb 2-1: Manufacturer: syz
[  236.308670][ T5828] usb 2-1: SerialNumber: syz
[  236.352474][ T4261] usb 6-1: USB disconnect, device number 10
[  236.361612][ T7046] usb 43-1: recv xbuf, 0
[  236.369288][ T4544] vhci_hcd: stop threads
[  236.375391][ T4544] vhci_hcd: release socket
[  236.402491][ T4544] vhci_hcd: disconnect device
[  236.445941][ T4238] vhci_hcd: vhci_device speed not set
[  236.503255][ T4304] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  236.647390][ T7088] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  236.694233][ T5828] usb 2-1: 0:2 : does not exist
[  236.773608][ T4304] usb 4-1: Using ep0 maxpacket: 32
[  236.818085][ T5828] usb 2-1: USB disconnect, device number 14
[  236.923437][ T4304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.965000][ T4304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.985495][ T4304] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  237.005738][ T4304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.033936][ T4304] usb 4-1: config 0 descriptor??
[  237.114420][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  237.281614][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  237.346933][ T7105] QAT: failed to copy from user.
[  237.523583][ T4304] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  237.786940][ T4304] usb 4-1: USB disconnect, device number 11
[  238.048735][ T7114] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  239.605768][ T7129] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  241.023418][ T4262] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  241.433375][ T4262] usb 4-1: Using ep0 maxpacket: 16
[  241.674202][ T4262] usb 4-1: config 4 has an invalid interface number: 37 but max is 0
[  241.698415][ T4262] usb 4-1: config 4 has no interface number 0
[  241.725985][ T4262] usb 4-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  241.760607][ T4262] usb 4-1: config 4 interface 37 has no altsetting 0
[  241.963527][ T4262] usb 4-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f
[  241.983292][ T4262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.023301][ T4262] usb 4-1: Product: syz
[  242.027694][ T4262] usb 4-1: Manufacturer: syz
[  242.032503][ T4262] usb 4-1: SerialNumber: syz
[  242.063601][ T7144] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  242.528281][ T4262] usb 4-1: USB disconnect, device number 12
[  242.720450][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'.
[  242.864839][ T7174] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  243.033363][   T23] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  243.323243][   T23] usb 3-1: Using ep0 maxpacket: 32
[  243.443638][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.536944][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.573052][   T23] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  243.610856][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.638796][ T7201] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  243.688416][   T23] usb 3-1: config 0 descriptor??
[  244.239800][   T23] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  244.506547][ T4262] usb 3-1: USB disconnect, device number 15
[  244.559520][ T7219] kvm: pic: non byte write
[  244.641547][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'.
[  246.024254][ T7256] CUSE: info not properly terminated
[  246.178591][ T7263] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  246.274036][ T7261] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  246.512286][ T7270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.776'.
[  248.683398][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'.
[  249.526273][ T7296] kvm: MWAIT instruction emulated as NOP!
[  249.643196][ T4304] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  251.981280][ T4304] usb 1-1: Using ep0 maxpacket: 32
[  252.143434][ T4304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.174975][ T4304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.215895][ T4304] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  252.242375][ T4304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.278993][ T4304] usb 1-1: config 0 descriptor??
[  252.633341][ T4304] usbhid 1-1:0.0: can't add hid device: -71
[  252.633384][ T4238] Bluetooth: hci5: command 0x0406 tx timeout
[  252.645449][ T4304] usbhid: probe of 1-1:0.0 failed with error -71
[  252.687285][ T4304] usb 1-1: USB disconnect, device number 14
[  253.123395][ T4849] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2
[  253.513366][ T4304] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  253.593206][   T23] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  253.626560][ T7354] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  253.763189][ T4304] usb 6-1: Using ep0 maxpacket: 32
[  253.890493][ T4304] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  253.909099][ T4304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.939012][ T4304] usb 6-1: config 0 descriptor??
[  253.973437][   T23] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  253.999116][   T23] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3
[  254.028933][   T23] usb 1-1: config 220 interface 0 has no altsetting 0
[  254.203649][   T23] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  254.213054][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.221845][ T4304] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  254.235926][ T4304] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  254.245574][   T23] usb 1-1: Product: syz
[  254.249911][   T23] usb 1-1: Manufacturer: syz
[  254.255689][   T23] usb 1-1: SerialNumber: syz
[  254.273536][ T4304] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  254.281060][ T4304] usb 6-1: media controller created
[  254.300447][ T4304] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  254.366687][ T4304] DVB: Unable to find symbol dib7000p_attach()
[  254.383567][ T4304] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  254.493427][ T4304] rc_core: IR keymap rc-dib0700-rc5 not found
[  254.500092][ T4304] Registered IR keymap rc-empty
[  254.507093][ T4304] dvb-usb: could not initialize remote control.
[  254.518134][ T4304] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  254.663382][   T23] usb 1-1: Found UVC 0.00 device syz (8086:0b07)
[  254.669821][   T23] usb 1-1: No valid video chain found.
[  254.678107][   T23] usb 1-1: USB disconnect, device number 15
[  254.705421][ T4304] usb 6-1: USB disconnect, device number 11
[  254.745765][ T4304] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  255.666127][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  255.672466][ T1419] ieee802154 phy1 wpan1: encryption failed: -22