last executing test programs:

10.245748172s ago: executing program 0 (id=1226):
socket$inet(0x2, 0x4000000000000001, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pipe(&(0x7f0000000440))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x8)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x5, 0x400007f, 0x4000006, 0x3, "42341f9b1000007e4f00"})
r1 = syz_open_pts(r0, 0x60300)
dup3(r1, r0, 0x0)

9.948006817s ago: executing program 0 (id=1229):
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x410000002)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x358, 0x800000000000)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
dup3(0xffffffffffffffff, r0, 0x80000)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
syz_clone3(&(0x7f0000000900)={0xb800000, &(0x7f0000000180), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_submit(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
r4 = timerfd_create(0x1, 0x0)
timerfd_settime(r4, 0x0, 0x0, 0x0)

9.765767073s ago: executing program 1 (id=1230):
socket$tipc(0x1e, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_open_dev$evdev(&(0x7f0000000040), 0xa, 0x101000)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket$inet(0x2, 0x2, 0x1)
syz_open_procfs(0x0, &(0x7f0000000140)='comm\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYBLOB='\a'], 0x0)

9.037764228s ago: executing program 0 (id=1234):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096})
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0xc36ec000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xe2242, 0x98)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, 0x0)
unshare(0x40400)

7.335861062s ago: executing program 4 (id=1240):
socket$inet6(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000080))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x4, 0x4, 0x4, 0x1}, 0x50)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
socket(0x10, 0x803, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r4, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000)

6.8950582s ago: executing program 2 (id=1242):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r6, 0x0, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884)

6.637685092s ago: executing program 4 (id=1244):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000280), 0x4)
sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)="27050200420014000600002fb96dbcf706e1c9dce80137f7db0f8d86498b3812b0164aebaff0a1614c80fd8410379dc65c8f6ee03ef731cec44c408d113746aa79727c2e5dd094a5fe703ea96e6341e840389f138410be380b77faea6b46efd50818022078c0035c13", 0x69}], 0x1}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
ioctl$TCFLSH(r4, 0x400455c8, 0x4)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000019080)=0x30)

6.633819711s ago: executing program 1 (id=1245):
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x410000002)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x358, 0x800000000000)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
dup3(0xffffffffffffffff, r0, 0x80000)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
syz_clone3(&(0x7f0000000900)={0xb800000, &(0x7f0000000180), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_submit(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
r4 = timerfd_create(0x1, 0x0)
timerfd_settime(r4, 0x0, 0x0, 0x0)

5.766571751s ago: executing program 2 (id=1246):
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$tipc(0x1e, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_open_dev$evdev(&(0x7f0000000040), 0xa, 0x101000)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket$inet(0x2, 0x2, 0x1)
syz_open_procfs(0x0, &(0x7f0000000140)='comm\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYBLOB="07b0"], 0x0)

5.54912043s ago: executing program 1 (id=1247):
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca)
bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'})
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
connect$rose(r3, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
connect$rose(r3, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c)

5.501555431s ago: executing program 4 (id=1248):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
clock_getres(0xfffffffffffffffb, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r3, &(0x7f00000047c0)={0x2020}, 0x2020)

5.228483411s ago: executing program 0 (id=1249):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x188}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233", 0x66}, {0x0}, {0x0}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7", 0x10}], 0x5, 0x4d9e, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.510208727s ago: executing program 4 (id=1251):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b"], 0x188}}], 0x1, 0x810)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aea", 0x77}, {0x0}, {0x0}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a30312713", 0x1a}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d5", 0x1f}], 0x5, 0x4d9e, 0x8)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.049127401s ago: executing program 1 (id=1252):
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000015000504e1"], 0x2c}}, 0x60040050)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRESOCT, @ANYRES64=r2, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3}, 0x94)
ioctl$FS_IOC_FSSETXATTR(r3, 0x7040, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15)

3.996616802s ago: executing program 3 (id=1253):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000100)={{<r1=>r0, &(0x7f0000000000)='/dev/dri/card#\x00', 0x240000, &(0x7f0000000040)={@align=0x2, {0x8, 0x998, 0xdb, 0x6de8}}, 0x1, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xfff}, {[0x3, 0x8, 0xffffffff]}, 0x81, 0xe6, &(0x7f00000002c0)=""/230})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040), 0x4)
mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,')
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',', @ANYRES16, @ANYBLOB="01002abd7000fccbdf2509000000050007000000000008000100010000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000001c0)=')]\xf2[\x00', 0x0, r0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x40, 0x0, 0x9})
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000980)={0x3, 0x5, 0x80000000}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000052000100090000000000010000000000"], 0x1c}}, 0x8800)

2.999226527s ago: executing program 3 (id=1254):
socket$inet6(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000080))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x4, 0x4, 0x4, 0x1}, 0x50)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
socket(0x10, 0x803, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r4, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000)

2.973844552s ago: executing program 1 (id=1255):
socket$inet(0x2, 0x4000000000000001, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pipe(&(0x7f0000000440))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x8)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x5, 0x400007f, 0x4000006, 0x3, "42341f9b1000007e4f00"})
r1 = syz_open_pts(r0, 0x60300)
dup3(r1, r0, 0x0)

2.936478365s ago: executing program 4 (id=1256):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r6, 0x0, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884)

2.924294573s ago: executing program 0 (id=1257):
socket$tipc(0x1e, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_open_dev$evdev(&(0x7f0000000040), 0xa, 0x101000)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket$inet(0x2, 0x2, 0x1)
syz_open_procfs(0x0, &(0x7f0000000140)='comm\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYBLOB='\a'], 0x0)

2.889248606s ago: executing program 3 (id=1258):
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x410000002)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x358, 0x800000000000)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
dup3(0xffffffffffffffff, r0, 0x80000)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
syz_clone3(&(0x7f0000000900)={0xb800000, &(0x7f0000000180), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_submit(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
r4 = timerfd_create(0x1, 0x0)
timerfd_settime(r4, 0x0, 0x0, 0x0)

2.844546468s ago: executing program 1 (id=1259):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0xc36ec000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xe2242, 0x98)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, 0x0)
unshare(0x40400)

2.63853571s ago: executing program 4 (id=1260):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x5, 0x0)
syz_io_uring_setup(0x8d2, 0x0, &(0x7f00000001c0), &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)

2.384172192s ago: executing program 2 (id=1261):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000280), 0x4)
sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)="27050200420014000600002fb96dbcf706e1c9dce80137f7db0f8d86498b3812b0164aebaff0a1614c80fd8410379dc65c8f6ee03ef731cec44c408d113746aa79727c2e5dd094a5fe703ea96e6341e840389f138410be380b77faea6b46efd50818022078c0035c13", 0x69}], 0x1}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000019080)=0x30)

1.859722345s ago: executing program 3 (id=1262):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
clock_getres(0xfffffffffffffffb, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r3, &(0x7f00000047c0)={0x2020}, 0x2020)

1.033435822s ago: executing program 2 (id=1263):
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca)
bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004010)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'})
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
connect$rose(r2, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
connect$rose(r2, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c)

945.367345ms ago: executing program 2 (id=1264):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000100)={{r0, &(0x7f0000000000)='/dev/dri/card#\x00', 0x240000, &(0x7f0000000040)={@align=0x2, {0x8, 0x998, 0xdb, 0x6de8}}, 0x1, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xfff}, {[0x3, 0x8, 0xffffffff]}, 0x81, 0xe6, &(0x7f00000002c0)=""/230})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040), 0x4)
mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,')
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',', @ANYRES16, @ANYBLOB="01002abd7000fccbdf2509000000050007000000000008000100010000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x40, 0x0, 0x9})
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x3, 0x5, 0x80000000}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000052000100090000000000010000000000"], 0x1c}}, 0x8800)

425.718639ms ago: executing program 3 (id=1265):
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000015000504e1"], 0x2c}}, 0x60040050)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRESOCT, @ANYRES64=r2, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3}, 0x94)
ioctl$FS_IOC_FSSETXATTR(r3, 0x7040, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15)

265.338949ms ago: executing program 3 (id=1266):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000100)={{<r1=>r0, &(0x7f0000000000)='/dev/dri/card#\x00', 0x240000, &(0x7f0000000040)={@align=0x2, {0x8, 0x998, 0xdb, 0x6de8}}, 0x1, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xfff}, {[0x3, 0x8, 0xffffffff]}, 0x81, 0xe6, &(0x7f00000002c0)=""/230})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040), 0x4)
mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,')
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',', @ANYRES16, @ANYBLOB="01002abd7000fccbdf2509000000050007000000000008000100010000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000001c0)=')]\xf2[\x00', 0x0, r0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x40, 0x0, 0x9})
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000980)={0x3, 0x5, 0x80000000}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000052000100090000000000010000000000"], 0x1c}}, 0x8800)

60.592171ms ago: executing program 2 (id=1267):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b"], 0x188}}], 0x1, 0x810)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aea", 0x77}, {0x0}, {0x0}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a30312713", 0x1a}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d5", 0x1f}], 0x5, 0x4d9e, 0x8)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

0s ago: executing program 0 (id=1268):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x188}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233", 0x66}, {0x0}, {0x0}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7", 0x10}], 0x5, 0x4d9e, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

 such file or directory
[  120.832874][ T5300] netlink: 'syz.0.318': attribute type 1 has an invalid length.
[  120.930718][ T5300] 8021q: adding VLAN 0 to HW filter on device bond2
[  120.998720][ T5300] bond1: (slave bond0): Releasing active interface
[  121.054946][ T5300] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.114354][ T5300] bond2: (slave bond0): making interface the new active one
[  121.194120][ T5300] bond2: (slave bond0): Enslaving as an active interface with an up link
[  121.226250][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  122.413183][ T5340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.326'.
[  122.667220][ T1107] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  122.993489][ T1107] usb 2-1: Using ep0 maxpacket: 16
[  123.012559][ T5356] device syzkaller0 entered promiscuous mode
[  123.143706][ T1107] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.181706][ T1107] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  123.194170][   T26] audit: type=1326 audit(1773342156.441:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5334 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75c23c799 code=0x7fc00000
[  123.273296][ T5360] netlink: 'syz.2.332': attribute type 1 has an invalid length.
[  123.310248][ T5360] 8021q: adding VLAN 0 to HW filter on device bond7
[  123.354081][ T5360] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.372009][ T5360] bond7: (slave bond0): making interface the new active one
[  123.383867][ T1107] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  123.397710][ T5360] bond7: (slave bond0): Enslaving as an active interface with an up link
[  123.403330][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.412283][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready
[  123.433357][ T1107] usb 2-1: Product: syz
[  123.439638][ T1107] usb 2-1: Manufacturer: syz
[  123.455890][ T1107] usb 2-1: SerialNumber: syz
[  123.526321][ T4226] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  123.794121][ T4226] usb 1-1: Using ep0 maxpacket: 16
[  123.799708][ T1107] usb 2-1: 0:2 : does not exist
[  123.835832][ T1107] usb 2-1: USB disconnect, device number 9
[  123.954282][ T4226] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.970668][ T4226] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  124.106081][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  124.179018][ T4226] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  124.196252][ T4226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.213292][ T4226] usb 1-1: Product: syz
[  124.223585][ T4226] usb 1-1: Manufacturer: syz
[  124.233545][ T4226] usb 1-1: SerialNumber: syz
[  124.402236][ T5377] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.491236][ T5377] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.532928][ T5379] netlink: 'syz.3.338': attribute type 1 has an invalid length.
[  124.573513][ T4226] usb 1-1: 0:2 : does not exist
[  124.581006][ T5381] kvm: pic: single mode not supported
[  124.594670][ T4226] usb 1-1: USB disconnect, device number 6
[  124.599396][ T5382] bond3: (slave gretap1): making interface the new active one
[  124.633728][ T5382] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  124.649291][ T5384] device macvlan2 entered promiscuous mode
[  124.658257][ T5384] device bond3 entered promiscuous mode
[  124.665440][ T5384] device gretap1 entered promiscuous mode
[  124.673114][ T5384] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  124.684363][ T5384] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  124.703875][ T5384] device bond3 left promiscuous mode
[  124.710093][ T5384] device gretap1 left promiscuous mode
[  124.742633][ T5388] device syzkaller0 entered promiscuous mode
[  124.819228][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  125.128171][ T5405] netlink: 'syz.3.347': attribute type 1 has an invalid length.
[  125.448925][ T5405] 8021q: adding VLAN 0 to HW filter on device bond4
[  125.520363][ T5415] bond2: (slave bond0): Releasing active interface
[  125.580207][ T5415] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.622903][ T5415] bond4: (slave bond0): making interface the new active one
[  125.646268][ T5415] bond4: (slave bond0): Enslaving as an active interface with an up link
[  125.656384][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  125.743491][    T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  125.743628][   T26] audit: type=1326 audit(1773342158.981:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5398 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c83a799 code=0x7fc00000
[  126.003365][    T7] usb 1-1: Using ep0 maxpacket: 16
[  126.136788][    T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.150403][ T5435] netlink: 'syz.4.356': attribute type 1 has an invalid length.
[  126.159939][    T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  126.186146][ T5434] device syzkaller0 entered promiscuous mode
[  126.238048][ T5435] bond2: (slave gretap1): making interface the new active one
[  126.257920][ T5435] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  126.277584][ T5437] device macvlan2 entered promiscuous mode
[  126.285181][ T5437] device bond2 entered promiscuous mode
[  126.291224][ T5437] device gretap1 entered promiscuous mode
[  126.297761][ T5437] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  126.308506][ T5437] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  126.326636][    T7] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  126.336631][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.345525][    T7] usb 1-1: Product: syz
[  126.345613][ T5437] device bond2 left promiscuous mode
[  126.350123][    T7] usb 1-1: Manufacturer: syz
[  126.360895][    T7] usb 1-1: SerialNumber: syz
[  126.366722][ T5437] device gretap1 left promiscuous mode
[  126.638844][ T5442] device syzkaller0 entered promiscuous mode
[  127.405559][    T7] usb 1-1: 0:2 : does not exist
[  127.431712][    T7] usb 1-1: USB disconnect, device number 7
[  127.452130][ T5449] netlink: 'syz.3.362': attribute type 1 has an invalid length.
[  127.545765][ T5449] 8021q: adding VLAN 0 to HW filter on device bond5
[  127.666453][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  127.763540][   T21] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  127.882756][ T5449] bond4: (slave bond0): Releasing active interface
[  128.029112][ T5449] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.048758][ T5449] bond5: (slave bond0): making interface the new active one
[  128.076828][ T5449] bond5: (slave bond0): Enslaving as an active interface with an up link
[  128.097746][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  128.138620][   T21] usb 3-1: Using ep0 maxpacket: 16
[  128.277057][   T26] audit: type=1326 audit(1773342161.521:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44d90b799 code=0x7fc00000
[  128.283741][   T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  128.362619][   T21] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  128.414436][ T4464] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  128.482656][ T5476] netlink: 'syz.3.369': attribute type 1 has an invalid length.
[  128.546073][ T5475] device syzkaller0 entered promiscuous mode
[  128.570394][   T21] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  128.589405][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.604611][ T5476] device macvlan2 entered promiscuous mode
[  128.604614][   T21] usb 3-1: Product: syz
[  128.604632][   T21] usb 3-1: Manufacturer: syz
[  128.612080][ T5476] device bond6 entered promiscuous mode
[  128.619819][   T21] usb 3-1: SerialNumber: syz
[  128.620873][ T5476] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  128.642211][ T5476] device bond6 left promiscuous mode
[  128.741838][ T5483] device syzkaller0 entered promiscuous mode
[  128.793525][ T4464] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  128.811321][ T4464] usb 5-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  128.963681][   T21] usb 3-1: 0:2 : does not exist
[  128.969961][ T4464] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  128.985789][ T4464] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  129.008732][   T21] usb 3-1: USB disconnect, device number 8
[  129.021998][ T4464] usb 5-1: Manufacturer: syz
[  129.039423][ T4464] usb 5-1: SerialNumber: syz
[  129.064101][ T4228] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  129.307957][ T5466] netlink: 56 bytes leftover after parsing attributes in process `syz.4.363'.
[  129.323323][ T4228] usb 2-1: Using ep0 maxpacket: 16
[  129.326677][ T5466] netlink: 'syz.4.363': attribute type 25 has an invalid length.
[  129.376083][ T4464] usbhid 5-1:36.0: couldn't find an input interrupt endpoint
[  129.393923][ T4464] usb 5-1: USB disconnect, device number 10
[  129.463841][ T4228] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.482566][ T4228] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  129.495079][ T5497] netlink: 'syz.2.376': attribute type 1 has an invalid length.
[  129.517629][ T5497] 8021q: adding VLAN 0 to HW filter on device bond8
[  129.548556][ T5497] bond7: (slave bond0): Releasing active interface
[  129.566327][ T5497] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.579149][ T5497] bond8: (slave bond0): making interface the new active one
[  129.601173][ T5497] bond8: (slave bond0): Enslaving as an active interface with an up link
[  129.616461][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready
[  129.693839][ T4228] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  129.728927][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.746332][ T4228] usb 2-1: Product: syz
[  129.750529][ T4228] usb 2-1: Manufacturer: syz
[  129.755850][ T4228] usb 2-1: SerialNumber: syz
[  130.103586][ T4228] usb 2-1: 0:2 : does not exist
[  130.202074][ T4228] usb 2-1: USB disconnect, device number 10
[  130.328149][ T5516] netlink: 'syz.4.381': attribute type 1 has an invalid length.
[  130.375487][ T5516] device macvlan2 entered promiscuous mode
[  130.390843][ T5516] device bond3 entered promiscuous mode
[  130.397985][ T5516] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  130.417857][ T5516] device bond3 left promiscuous mode
[  130.534919][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  130.602001][   T26] audit: type=1326 audit(1773342163.841:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44d90b799 code=0x7fc00000
[  130.744575][ T5524] device syzkaller0 entered promiscuous mode
[  130.781248][ T5525] device syzkaller0 entered promiscuous mode
[  131.034234][ T5536] netlink: 'syz.1.388': attribute type 1 has an invalid length.
[  131.114539][ T5536] 8021q: adding VLAN 0 to HW filter on device bond3
[  131.167730][ T5536] bond2: (slave bond0): Releasing active interface
[  131.190468][ T5536] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.208954][ T5536] bond3: (slave bond0): making interface the new active one
[  131.222380][ T5536] bond3: (slave bond0): Enslaving as an active interface with an up link
[  131.243413][ T5333] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  131.313579][ T4464] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  131.404962][ T5549] netlink: 'syz.1.393': attribute type 1 has an invalid length.
[  131.460042][ T5549] bond4: (slave gretap1): making interface the new active one
[  131.471934][ T5549] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  131.487627][ T5549] device macvlan2 entered promiscuous mode
[  131.495799][ T5549] device bond4 entered promiscuous mode
[  131.501925][ T5549] device gretap1 entered promiscuous mode
[  131.509349][ T5549] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  131.518412][ T5549] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  131.537183][ T5549] device bond4 left promiscuous mode
[  131.543726][ T5549] device gretap1 left promiscuous mode
[  131.563373][ T4464] usb 1-1: Using ep0 maxpacket: 16
[  131.683501][ T4464] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  131.702629][ T4464] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  131.715157][ T4226] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  131.903787][ T4464] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  131.929654][ T4464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.964379][ T4226] usb 3-1: Using ep0 maxpacket: 16
[  132.091428][ T4464] usb 1-1: Product: syz
[  132.106800][ T4464] usb 1-1: Manufacturer: syz
[  132.114117][ T4226] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  132.133499][ T4464] usb 1-1: SerialNumber: syz
[  132.142486][ T4226] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  132.233759][ T5568] device syzkaller0 entered promiscuous mode
[  132.309145][ T5570] device syzkaller0 entered promiscuous mode
[  132.333555][ T4226] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  132.349904][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.358918][ T4226] usb 3-1: Product: syz
[  132.363182][ T4226] usb 3-1: Manufacturer: syz
[  132.368983][ T4226] usb 3-1: SerialNumber: syz
[  132.464037][   T26] audit: type=1326 audit(1773342165.711:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7a7aa799 code=0x7fc00000
[  132.523401][ T4464] usb 1-1: 0:2 : does not exist
[  132.558833][ T4464] usb 1-1: USB disconnect, device number 8
[  132.662014][ T5583] netlink: 'syz.4.404': attribute type 1 has an invalid length.
[  132.774179][ T5583] 8021q: adding VLAN 0 to HW filter on device bond4
[  132.842586][ T4226] usb 3-1: 0:2 : does not exist
[  132.864140][ T4226] usb 3-1: USB disconnect, device number 9
[  132.915372][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  132.922185][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  133.073648][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  133.561115][ T5597] netlink: 'syz.4.406': attribute type 1 has an invalid length.
[  133.746089][ T5597] device macvlan2 entered promiscuous mode
[  133.775881][ T5597] device bond5 entered promiscuous mode
[  133.791581][ T5597] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  133.818252][ T5597] device bond5 left promiscuous mode
[  134.351950][ T5614] device syzkaller0 entered promiscuous mode
[  135.115390][ T5623] device syzkaller0 entered promiscuous mode
[  135.848283][ T5641] netlink: 'syz.2.417': attribute type 1 has an invalid length.
[  135.881230][   T26] audit: type=1326 audit(1773342169.121:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5620 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75c23c799 code=0x7fc00000
[  135.929680][ T5641] 8021q: adding VLAN 0 to HW filter on device bond9
[  136.020816][ T5643] bond8: (slave bond0): Releasing active interface
[  136.055306][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.067406][ T5643] bond9: (slave bond0): making interface the new active one
[  136.081543][ T5643] bond9: (slave bond0): Enslaving as an active interface with an up link
[  136.090847][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready
[  136.116471][ T5653] netlink: 'syz.1.422': attribute type 1 has an invalid length.
[  136.129351][ T4264] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  136.134535][ T4228] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  136.211411][ T5657] device macvlan2 entered promiscuous mode
[  136.219236][ T5657] device bond5 entered promiscuous mode
[  136.228555][ T5657] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  136.237749][ T5657] device bond5 left promiscuous mode
[  136.259690][ T5659] device syzkaller0 entered promiscuous mode
[  136.379248][ T4264] usb 4-1: Using ep0 maxpacket: 16
[  136.421441][ T5665] device syzkaller0 entered promiscuous mode
[  136.453665][ T4228] usb 1-1: Using ep0 maxpacket: 16
[  136.513437][ T4264] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.527818][ T4264] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  136.583781][ T4228] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.605065][ T4228] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  136.677452][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'.
[  136.993657][ T4264] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  137.009095][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.018368][ T4264] usb 4-1: Product: syz
[  137.022749][ T4264] usb 4-1: Manufacturer: syz
[  137.033963][ T4264] usb 4-1: SerialNumber: syz
[  137.216073][ T4228] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  137.241510][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.250064][ T4228] usb 1-1: Product: syz
[  137.262706][ T4228] usb 1-1: Manufacturer: syz
[  137.267713][ T4228] usb 1-1: SerialNumber: syz
[  137.363604][ T4264] usb 4-1: 0:2 : does not exist
[  137.401066][ T4264] usb 4-1: USB disconnect, device number 5
[  137.623928][ T4228] usb 1-1: 0:2 : does not exist
[  137.694325][ T4228] usb 1-1: USB disconnect, device number 9
[  137.792972][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  137.956791][ T5693] netlink: 'syz.2.434': attribute type 1 has an invalid length.
[  138.043985][ T4359] udevd[4359]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  138.057745][ T5693] 8021q: adding VLAN 0 to HW filter on device bond10
[  138.132810][ T5693] bond9: (slave bond0): Releasing active interface
[  138.177613][   T26] audit: type=1326 audit(1773342171.421:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75c23c799 code=0x7fc00000
[  138.198396][ T5693] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.218095][ T5693] bond10: (slave bond0): making interface the new active one
[  138.241680][ T5693] bond10: (slave bond0): Enslaving as an active interface with an up link
[  138.256858][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready
[  138.308676][ T5708] netlink: 'syz.4.437': attribute type 1 has an invalid length.
[  138.421035][ T5703] device syzkaller0 entered promiscuous mode
[  138.442452][ T5708] device macvlan2 entered promiscuous mode
[  138.479239][ T5708] device bond6 entered promiscuous mode
[  138.518828][ T5708] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  138.592152][ T5708] device bond6 left promiscuous mode
[  138.826782][ T5717] device syzkaller0 entered promiscuous mode
[  139.533685][ T4264] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  139.533739][ T4226] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  139.853389][ T4226] usb 4-1: Using ep0 maxpacket: 16
[  139.859295][ T4264] usb 3-1: Using ep0 maxpacket: 16
[  140.009766][ T5750] netlink: 'syz.0.450': attribute type 1 has an invalid length.
[  140.018606][ T4264] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  140.029647][ T4226] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  140.042266][ T4264] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  140.060455][ T4226] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  140.085602][ T5750] 8021q: adding VLAN 0 to HW filter on device bond3
[  140.138145][ T5750] bond2: (slave bond0): Releasing active interface
[  140.157375][   T26] audit: type=1326 audit(1773342173.401:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75c23c799 code=0x7fc00000
[  140.160823][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.195295][ T5750] bond3: (slave bond0): making interface the new active one
[  140.209930][ T5750] bond3: (slave bond0): Enslaving as an active interface with an up link
[  140.220214][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  140.243562][ T4264] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  140.253628][ T4226] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  140.262852][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.271711][ T4264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.280655][ T4226] usb 4-1: Product: syz
[  140.285652][ T4264] usb 3-1: Product: syz
[  140.290027][ T4226] usb 4-1: Manufacturer: syz
[  140.295332][ T4264] usb 3-1: Manufacturer: syz
[  140.300355][ T4226] usb 4-1: SerialNumber: syz
[  140.305615][ T4264] usb 3-1: SerialNumber: syz
[  140.401600][ T5760] device syzkaller0 entered promiscuous mode
[  140.548209][ T5762] device syzkaller0 entered promiscuous mode
[  140.673835][ T4226] usb 4-1: 0:2 : does not exist
[  140.700809][ T4226] usb 4-1: USB disconnect, device number 6
[  140.795414][ T5768] netlink: 'syz.1.453': attribute type 1 has an invalid length.
[  140.798902][ T4264] usb 3-1: 0:2 : does not exist
[  140.851997][ T4264] usb 3-1: USB disconnect, device number 10
[  140.874376][ T5768] device macvlan2 entered promiscuous mode
[  140.882747][ T5768] device bond6 entered promiscuous mode
[  140.890620][ T5768] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  140.901784][ T5768] device bond6 left promiscuous mode
[  141.045006][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  141.125499][ T4359] udevd[4359]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  141.292633][ T5788] device syzkaller0 entered promiscuous mode
[  141.708129][ T5795] netlink: 'syz.1.466': attribute type 1 has an invalid length.
[  141.738104][ T5795] 8021q: adding VLAN 0 to HW filter on device bond7
[  141.752291][ T5797] device syzkaller0 entered promiscuous mode
[  141.808065][ T5795] bond3: (slave bond0): Releasing active interface
[  141.825995][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.846236][ T5795] bond7: (slave bond0): making interface the new active one
[  141.865679][ T5795] bond7: (slave bond0): Enslaving as an active interface with an up link
[  141.883853][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready
[  142.036622][   T26] audit: type=1326 audit(1773342175.261:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5783 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fb86b799 code=0x7fc00000
[  142.099242][ T5809] netlink: 'syz.3.469': attribute type 1 has an invalid length.
[  142.134286][ T5809] device macvlan2 entered promiscuous mode
[  142.142003][ T5809] device bond7 entered promiscuous mode
[  142.148591][ T5809] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  142.158820][ T5809] device bond7 left promiscuous mode
[  142.251123][ T5815] lo speed is unknown, defaulting to 1000
[  142.287630][ T5815] lo speed is unknown, defaulting to 1000
[  142.334741][ T5815] lo speed is unknown, defaulting to 1000
[  142.350256][ T5815] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  142.383379][ T4228] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  142.404675][ T5815] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  142.470725][ T5815] lo speed is unknown, defaulting to 1000
[  142.484418][ T5815] lo speed is unknown, defaulting to 1000
[  142.491113][ T5815] lo speed is unknown, defaulting to 1000
[  142.510804][ T5815] lo speed is unknown, defaulting to 1000
[  142.521992][ T5815] lo speed is unknown, defaulting to 1000
[  142.594506][ T4264] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  142.668491][ T4228] usb 3-1: Using ep0 maxpacket: 8
[  142.743383][ T1336] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  142.803682][ T4228] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  142.812046][ T4228] usb 3-1: config 0 has no interface number 0
[  142.828766][ T4228] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  142.852526][ T4228] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping
[  142.856386][ T4264] usb 4-1: Using ep0 maxpacket: 16
[  142.874681][ T4228] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  142.901800][ T4228] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  142.923651][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.950623][ T4228] usb 3-1: config 0 descriptor??
[  142.996814][ T4264] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.015033][ T4228] ldusb 3-1:0.55: Interrupt in endpoint not found
[  143.021874][ T4264] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  143.053339][ T1336] usb 2-1: Using ep0 maxpacket: 16
[  143.195277][ T1336] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.213416][ T4264] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  143.226971][ T1336] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  143.233402][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.250529][ T4228] usb 3-1: USB disconnect, device number 11
[  143.263426][ T4264] usb 4-1: Product: syz
[  143.268147][ T4264] usb 4-1: Manufacturer: syz
[  143.272938][ T4264] usb 4-1: SerialNumber: syz
[  143.461519][ T1336] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  143.491573][ T1336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.500544][ T1336] usb 2-1: Product: syz
[  143.511937][ T1336] usb 2-1: Manufacturer: syz
[  143.517349][ T1336] usb 2-1: SerialNumber: syz
[  143.529961][ T5823] device syzkaller0 entered promiscuous mode
[  143.624208][ T4264] usb 4-1: 0:2 : does not exist
[  143.672711][ T4264] usb 4-1: USB disconnect, device number 7
[  143.837757][ T1336] usb 2-1: 0:2 : does not exist
[  143.870134][ T1336] usb 2-1: USB disconnect, device number 11
[  143.954605][ T5831] device syzkaller0 entered promiscuous mode
[  144.105320][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  144.165135][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  144.267836][ T5839] netlink: 'syz.0.481': attribute type 1 has an invalid length.
[  144.571859][ T5839] 8021q: adding VLAN 0 to HW filter on device bond4
[  144.653782][ T5846] bond3: (slave bond0): Releasing active interface
[  144.679837][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.692481][ T5846] bond4: (slave bond0): making interface the new active one
[  144.709157][ T5846] bond4: (slave bond0): Enslaving as an active interface with an up link
[  144.719151][ T5849] netlink: 'syz.3.484': attribute type 1 has an invalid length.
[  144.760406][   T26] audit: type=1326 audit(1773342178.001:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c83a799 code=0x7fc00000
[  144.783041][ T5854] device macvlan2 entered promiscuous mode
[  144.802034][ T5854] device bond8 entered promiscuous mode
[  144.831569][ T5854] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  144.856870][ T5860] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  144.895833][ T5854] device bond8 left promiscuous mode
[  144.971777][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  145.175893][ T5873] device syzkaller0 entered promiscuous mode
[  145.577067][ T5887] netlink: 'syz.4.497': attribute type 1 has an invalid length.
[  145.613542][ T4226] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  145.617572][ T5887] 8021q: adding VLAN 0 to HW filter on device bond7
[  145.643882][ T1336] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  145.791082][ T5887] bond1: (slave bond0): Releasing active interface
[  145.826377][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.849586][ T5887] bond7: (slave bond0): making interface the new active one
[  145.853649][ T4226] usb 2-1: Using ep0 maxpacket: 16
[  145.863083][ T5887] bond7: (slave bond0): Enslaving as an active interface with an up link
[  145.879861][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready
[  145.933323][ T1336] usb 3-1: Using ep0 maxpacket: 16
[  146.014643][ T4226] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.073828][ T4226] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  146.094136][ T1336] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.114980][ T1336] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  146.285034][ T4226] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  146.304580][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.326827][   T26] audit: type=1326 audit(1773342179.551:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5884 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fb86b799 code=0x7fc00000
[  146.350544][ T1336] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  146.370394][ T1336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.381370][ T4226] usb 2-1: Product: syz
[  146.389676][ T1336] usb 3-1: Product: syz
[  146.392256][ T4226] usb 2-1: Manufacturer: syz
[  146.403345][ T1336] usb 3-1: Manufacturer: syz
[  146.406329][ T4226] usb 2-1: SerialNumber: syz
[  146.413764][ T1336] usb 3-1: SerialNumber: syz
[  146.418831][ T5904] netlink: 'syz.3.501': attribute type 1 has an invalid length.
[  146.504517][ T5904] device macvlan2 entered promiscuous mode
[  146.512073][ T5904] device bond9 entered promiscuous mode
[  146.518901][ T5904] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  146.535289][ T5904] device bond9 left promiscuous mode
[  146.634886][ T5912] IPv6: NLM_F_CREATE should be specified when creating new route
[  146.709356][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'.
[  146.743946][ T1336] usb 3-1: 0:2 : does not exist
[  146.767965][ T1336] usb 3-1: USB disconnect, device number 12
[  146.822183][ T5919] device syzkaller0 entered promiscuous mode
[  146.833527][ T4226] usb 2-1: 0:2 : does not exist
[  146.862081][ T4226] usb 2-1: USB disconnect, device number 12
[  147.107798][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  147.145483][ T5926] netlink: 'syz.4.509': attribute type 1 has an invalid length.
[  147.158517][ T4359] udevd[4359]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  147.207311][ T5926] 8021q: adding VLAN 0 to HW filter on device bond8
[  147.320054][ T5926] bond7: (slave bond0): Releasing active interface
[  147.411836][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.475516][ T5926] bond8: (slave bond0): making interface the new active one
[  147.533646][ T5926] bond8: (slave bond0): Enslaving as an active interface with an up link
[  147.558950][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready
[  147.775066][ T5944] netlink: 'syz.2.514': attribute type 1 has an invalid length.
[  147.841579][ T5944] bond11: (slave gretap1): making interface the new active one
[  147.852888][ T5944] bond11: (slave gretap1): Enslaving as an active interface with an up link
[  147.911714][ T5944] device macvlan2 entered promiscuous mode
[  147.924495][ T5944] device bond11 entered promiscuous mode
[  147.931088][ T5944] device gretap1 entered promiscuous mode
[  147.952457][ T5944] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  147.962060][ T5944] bond11: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  147.981848][ T5944] device bond11 left promiscuous mode
[  147.987996][ T5944] device gretap1 left promiscuous mode
[  148.007323][ T5947] tipc: Failed to obtain node identity
[  148.016704][ T5947] tipc: Enabling of bearer <ib:veth1_to_team> rejected, failed to enable media
[  148.081152][ T5951] device syzkaller0 entered promiscuous mode
[  148.633404][ T4259] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  148.833444][ T4464] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  148.859341][ T5972] netlink: 'syz.3.524': attribute type 1 has an invalid length.
[  148.883344][ T4259] usb 3-1: Using ep0 maxpacket: 16
[  148.905293][ T5972] 8021q: adding VLAN 0 to HW filter on device bond10
[  149.012001][ T4259] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  149.023284][ T4259] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  149.079857][   T26] audit: type=1326 audit(1773342182.321:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44d90b799 code=0x7fc00000
[  149.153413][ T4464] usb 5-1: Using ep0 maxpacket: 16
[  149.203628][ T4259] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  149.215512][ T5985] device syzkaller0 entered promiscuous mode
[  149.222902][ T4259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.238767][ T4259] usb 3-1: Product: syz
[  149.244227][ T4259] usb 3-1: Manufacturer: syz
[  149.249446][ T4259] usb 3-1: SerialNumber: syz
[  149.293920][ T4464] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  149.318978][ T4464] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  149.427176][ T5992] netlink: 'syz.0.530': attribute type 1 has an invalid length.
[  149.490296][ T5992] bond5: (slave gretap1): making interface the new active one
[  149.501118][ T5992] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  149.523869][ T4464] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  149.548425][ T4464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.559443][ T5992] device macvlan2 entered promiscuous mode
[  149.578614][ T5992] device bond5 entered promiscuous mode
[  149.583561][ T4259] usb 3-1: 0:2 : does not exist
[  149.585175][ T4464] usb 5-1: Product: syz
[  149.600604][ T5992] device gretap1 entered promiscuous mode
[  149.607420][ T4464] usb 5-1: Manufacturer: syz
[  149.613905][ T5992] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  149.619209][ T4259] usb 3-1: USB disconnect, device number 13
[  149.631089][ T4464] usb 5-1: SerialNumber: syz
[  149.661809][ T5992] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  149.684430][ T5992] device bond5 left promiscuous mode
[  149.693121][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  149.714818][ T5992] device gretap1 left promiscuous mode
[  149.871970][ T5995] device syzkaller0 entered promiscuous mode
[  149.983526][ T4464] usb 5-1: 0:2 : does not exist
[  150.053772][ T4464] usb 5-1: USB disconnect, device number 11
[  150.106159][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  151.800061][ T6028] device syzkaller0 entered promiscuous mode
[  151.926421][ T6034] netlink: 'syz.3.542': attribute type 1 has an invalid length.
[  151.992567][   T26] audit: type=1326 audit(1773342185.221:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c83a799 code=0x7fc00000
[  152.027039][ T6038] device syzkaller0 entered promiscuous mode
[  152.070041][ T6034] device macvlan2 entered promiscuous mode
[  152.078319][ T6034] device bond11 entered promiscuous mode
[  152.084829][ T6034] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  152.097478][ T6034] device bond11 left promiscuous mode
[  152.320058][ T6048] netlink: 'syz.0.548': attribute type 1 has an invalid length.
[  152.363640][ T4226] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  152.369079][ T6048] 8021q: adding VLAN 0 to HW filter on device bond6
[  152.429905][ T6048] bond0: (slave team0): Releasing backup interface
[  152.573875][ T4464] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  152.643401][ T4226] usb 5-1: Using ep0 maxpacket: 16
[  152.737934][ T6065] block device autoloading is deprecated and will be removed.
[  152.803490][ T4226] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.820450][ T4226] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  152.839909][ T4464] usb 4-1: Using ep0 maxpacket: 16
[  152.858093][ T6073] device syzkaller0 entered promiscuous mode
[  152.983604][ T4464] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.995028][ T4464] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  153.043681][ T4226] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  153.054438][ T4226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.069413][ T4226] usb 5-1: Product: syz
[  153.076993][ T4226] usb 5-1: Manufacturer: syz
[  153.083052][ T4226] usb 5-1: SerialNumber: syz
[  153.214086][ T4464] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  153.224863][ T4464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.236292][ T4464] usb 4-1: Product: syz
[  153.241149][ T4464] usb 4-1: Manufacturer: syz
[  153.249801][ T4464] usb 4-1: SerialNumber: syz
[  153.474656][ T4226] usb 5-1: 0:2 : does not exist
[  153.534455][ T4226] usb 5-1: USB disconnect, device number 12
[  153.550810][ T6085] netlink: 'syz.1.558': attribute type 1 has an invalid length.
[  153.574850][ T6085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.558'.
[  153.597986][ T6085] device macvlan2 entered promiscuous mode
[  153.619618][ T6085] device bond8 entered promiscuous mode
[  153.629435][ T6085] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  153.642840][ T6085] device bond8 left promiscuous mode
[  153.683478][ T4464] usb 4-1: 0:2 : does not exist
[  153.716488][ T4464] usb 4-1: USB disconnect, device number 8
[  153.781145][   T26] audit: type=1326 audit(1773342187.021:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.2.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c83a799 code=0x7fc00000
[  153.839089][ T6088] device syzkaller0 entered promiscuous mode
[  153.992126][ T4359] udevd[4359]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  153.992470][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  154.090334][ T6095] netlink: 'syz.1.562': attribute type 1 has an invalid length.
[  154.174799][ T6095] 8021q: adding VLAN 0 to HW filter on device bond9
[  155.362488][ T6124] device syzkaller0 entered promiscuous mode
[  155.516928][ T6129] netlink: 'syz.2.570': attribute type 1 has an invalid length.
[  155.565057][ T6129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.570'.
[  155.581610][ T6129] device macvlan2 entered promiscuous mode
[  155.591257][ T6129] device bond12 entered promiscuous mode
[  155.598210][ T6129] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  155.609039][ T6129] device bond12 left promiscuous mode
[  155.674788][ T6134] device syzkaller0 entered promiscuous mode
[  156.301441][ T6147] netlink: 'syz.1.577': attribute type 1 has an invalid length.
[  156.328548][ T6147] 8021q: adding VLAN 0 to HW filter on device bond10
[  156.373475][   T26] audit: type=1326 audit(1773342189.611:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fb86b799 code=0x7fc00000
[  156.397218][ T4230] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  156.413930][ T4228] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  156.470854][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'.
[  156.494119][ T6157] 8021q: adding VLAN 0 to HW filter on device bond7
[  156.507984][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'.
[  156.519132][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'.
[  156.546534][ T6157] bond4: (slave bond0): Releasing active interface
[  156.585566][ T6157] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.601283][ T6157] bond7: (slave bond0): making interface the new active one
[  156.621363][ T6157] bond7: (slave bond0): Enslaving as an active interface with an up link
[  156.632658][ T6162] netlink: 'syz.0.576': attribute type 4 has an invalid length.
[  156.648894][ T6162] netlink: 152 bytes leftover after parsing attributes in process `syz.0.576'.
[  156.663472][ T4228] usb 5-1: Using ep0 maxpacket: 16
[  156.693388][ T4230] usb 3-1: Using ep0 maxpacket: 16
[  156.736076][ T6162] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  156.783527][ T4228] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  156.799771][ T4228] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  156.848790][ T4230] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  156.869647][ T4230] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  156.898396][ T5464] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready
[  156.957866][ T6168] device syzkaller0 entered promiscuous mode
[  156.984004][ T4228] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  157.002081][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.025662][ T4228] usb 5-1: Product: syz
[  157.030219][ T4228] usb 5-1: Manufacturer: syz
[  157.045228][ T4228] usb 5-1: SerialNumber: syz
[  157.088930][ T4230] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  157.114373][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.132750][ T4230] usb 3-1: Product: syz
[  157.151065][ T4230] usb 3-1: Manufacturer: syz
[  157.192956][ T4230] usb 3-1: SerialNumber: syz
[  157.373548][ T4228] usb 5-1: 0:2 : does not exist
[  157.390960][ T4228] usb 5-1: USB disconnect, device number 13
[  157.477123][ T6174] netlink: 'syz.0.583': attribute type 1 has an invalid length.
[  157.506440][ T6174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.583'.
[  157.528011][ T6174] device macvlan2 entered promiscuous mode
[  157.553443][ T4230] usb 3-1: 0:2 : does not exist
[  157.585992][ T4230] usb 3-1: USB disconnect, device number 14
[  157.588459][ T6174] device bond8 entered promiscuous mode
[  157.617126][ T6174] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  157.633872][ T6174] device bond8 left promiscuous mode
[  157.670851][ T6177] device syzkaller0 entered promiscuous mode
[  157.785107][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  157.826358][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  158.561369][ T6192] netlink: 'syz.2.589': attribute type 1 has an invalid length.
[  158.597535][ T6192] 8021q: adding VLAN 0 to HW filter on device bond13
[  158.671837][ T6192] bond0: (slave team0): Releasing backup interface
[  159.360378][ T6206] device syzkaller0 entered promiscuous mode
[  159.378669][   T26] audit: type=1326 audit(1773342192.611:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7a7aa799 code=0x7fc00000
[  159.580506][ T6217] netlink: 'syz.1.596': attribute type 1 has an invalid length.
[  159.705069][ T6220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.596'.
[  159.953618][ T6227] device syzkaller0 entered promiscuous mode
[  160.274264][ T4227] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  160.403359][    T7] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  160.543566][ T4227] usb 1-1: Using ep0 maxpacket: 16
[  160.683491][    T7] usb 3-1: Using ep0 maxpacket: 16
[  160.713931][ T4227] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.731488][ T4227] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  160.823605][    T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.845506][    T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  160.937510][ T4227] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  160.937540][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.937558][ T4227] usb 1-1: Product: syz
[  160.937589][ T4227] usb 1-1: Manufacturer: syz
[  160.937618][ T4227] usb 1-1: SerialNumber: syz
[  161.044227][    T7] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  161.086485][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.179536][    T7] usb 3-1: Product: syz
[  161.198763][    T7] usb 3-1: Manufacturer: syz
[  161.223914][    T7] usb 3-1: SerialNumber: syz
[  161.274678][ T4227] usb 1-1: 0:2 : does not exist
[  161.341811][ T4227] usb 1-1: USB disconnect, device number 10
[  161.573621][   T26] audit: type=1326 audit(1773342194.801:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.1.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7a7aa799 code=0x7fc00000
[  161.634129][    T7] usb 3-1: 0:2 : does not exist
[  161.672875][    T7] usb 3-1: USB disconnect, device number 15
[  161.711275][ T6262] device syzkaller0 entered promiscuous mode
[  161.865696][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  161.901531][ T6269] netlink: 'syz.1.610': attribute type 1 has an invalid length.
[  161.924035][ T4359] udevd[4359]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  162.028392][ T6273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.610'.
[  162.043968][ T6272] device syzkaller0 entered promiscuous mode
[  162.089568][ T6269] device macvlan2 entered promiscuous mode
[  162.099038][ T6269] device bond12 entered promiscuous mode
[  162.106052][ T6269] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  162.132979][ T6269] device bond12 left promiscuous mode
[  162.160828][ T6280] device syzkaller0 entered promiscuous mode
[  162.492369][ T6303] device syzkaller0 entered promiscuous mode
[  163.241012][   T26] audit: type=1326 audit(1773342196.481:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75c23c799 code=0x7fc00000
[  163.563347][ T4227] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  163.623592][   T21] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  163.873620][ T4227] usb 1-1: Using ep0 maxpacket: 16
[  163.893447][   T21] usb 5-1: Using ep0 maxpacket: 16
[  163.998297][ T6329] netlink: 'syz.3.627': attribute type 1 has an invalid length.
[  164.003594][ T4227] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.023603][   T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.033543][ T4227] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  164.040477][   T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  164.123853][ T6330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.627'.
[  164.149849][ T6329] device macvlan2 entered promiscuous mode
[  164.158780][ T6329] device bond12 entered promiscuous mode
[  164.165813][ T6329] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  164.184146][ T6329] device bond12 left promiscuous mode
[  164.216958][ T6335] device syzkaller0 entered promiscuous mode
[  164.223707][   T21] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  164.223738][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.223757][   T21] usb 5-1: Product: syz
[  164.223771][   T21] usb 5-1: Manufacturer: syz
[  164.223784][   T21] usb 5-1: SerialNumber: syz
[  164.257895][ T4227] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  164.274812][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.287990][ T4227] usb 1-1: Product: syz
[  164.292444][ T4227] usb 1-1: Manufacturer: syz
[  164.299098][ T4227] usb 1-1: SerialNumber: syz
[  164.644214][   T21] usb 5-1: 0:2 : does not exist
[  164.838216][   T21] usb 5-1: USB disconnect, device number 14
[  165.425383][ T6346] device syzkaller0 entered promiscuous mode
[  165.453565][ T4227] usb 1-1: 0:2 : does not exist
[  165.476007][ T4227] usb 1-1: USB disconnect, device number 11
[  165.563923][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  165.765602][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  166.178184][ T6368] netlink: 'syz.2.640': attribute type 1 has an invalid length.
[  166.243354][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'.
[  166.327333][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'.
[  166.391678][ T6368] device macvlan2 entered promiscuous mode
[  166.425821][ T6368] device bond14 entered promiscuous mode
[  166.433052][ T6368] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  166.454477][ T6368] device bond14 left promiscuous mode
[  166.459917][   T26] audit: type=1326 audit(1773342199.701:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44d90b799 code=0x7fc00000
[  166.634317][ T6377] device syzkaller0 entered promiscuous mode
[  166.802297][ T6395] device syzkaller0 entered promiscuous mode
[  166.863421][ T1336] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  167.123392][ T1336] usb 1-1: Using ep0 maxpacket: 16
[  167.123752][ T4230] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  167.243897][ T1336] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  167.267359][ T1336] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  167.393342][ T4230] usb 2-1: Using ep0 maxpacket: 16
[  167.474247][ T1336] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  167.502135][ T1336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.513581][ T4230] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  167.535712][ T4230] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  167.547851][ T1336] usb 1-1: Product: syz
[  167.557406][ T1336] usb 1-1: Manufacturer: syz
[  167.570994][ T1336] usb 1-1: SerialNumber: syz
[  167.733513][ T4230] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  167.752723][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.793477][ T4230] usb 2-1: Product: syz
[  167.818310][ T4230] usb 2-1: Manufacturer: syz
[  167.826055][ T4230] usb 2-1: SerialNumber: syz
[  167.913635][ T1336] usb 1-1: 0:2 : does not exist
[  168.012163][ T1336] usb 1-1: USB disconnect, device number 12
[  168.171701][ T6414] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  168.193784][ T4230] usb 2-1: 0:2 : does not exist
[  168.226287][ T4230] usb 2-1: USB disconnect, device number 13
[  168.273637][   T23] Bluetooth: hci2: command 0x0406 tx timeout
[  168.485341][ T4359] udevd[4359]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  169.237936][   T26] audit: type=1326 audit(1773342202.481:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44d90b799 code=0x7fc00000
[  169.253494][ T4259] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  169.386380][ T6432] netlink: 'syz.2.656': attribute type 1 has an invalid length.
[  169.498833][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'.
[  169.513495][ T4259] usb 2-1: Using ep0 maxpacket: 16
[  169.552379][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.656'.
[  169.632046][ T6432] device macvlan2 entered promiscuous mode
[  169.638685][ T4259] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  169.666830][ T4259] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  169.667383][ T6432] device bond15 entered promiscuous mode
[  169.747013][ T6432] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  169.765424][ T6432] device bond15 left promiscuous mode
[  169.798946][ T6439] device syzkaller0 entered promiscuous mode
[  169.874040][ T4259] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  169.909081][ T4259] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.938761][ T4259] usb 2-1: Product: syz
[  169.970725][ T4259] usb 2-1: Manufacturer: syz
[  169.976744][ T4259] usb 2-1: SerialNumber: syz
[  169.993859][ T6446] device syzkaller0 entered promiscuous mode
[  170.373486][ T4259] usb 2-1: 0:2 : does not exist
[  170.408088][ T4259] usb 2-1: USB disconnect, device number 14
[  170.468574][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.633346][ T4227] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  170.885380][ T4227] usb 5-1: Using ep0 maxpacket: 16
[  171.033980][ T4227] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  171.072507][ T4227] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  171.400413][   T26] audit: type=1326 audit(1773342204.641:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.2.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c83a799 code=0x7fc00000
[  171.970390][ T6473] netlink: 'syz.0.670': attribute type 1 has an invalid length.
[  172.004566][ T4227] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  172.014504][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.023977][ T4227] usb 5-1: Product: syz
[  172.029228][ T4227] usb 5-1: Manufacturer: syz
[  172.035126][ T4227] usb 5-1: SerialNumber: syz
[  172.125495][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'.
[  172.143864][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'.
[  172.406890][ T6473] device macvlan2 entered promiscuous mode
[  172.440407][ T6473] device bond9 entered promiscuous mode
[  172.576588][ T6473] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  172.599149][ T4227] usb 5-1: 0:2 : does not exist
[  172.605848][ T6473] device bond9 left promiscuous mode
[  172.649578][ T4227] usb 5-1: USB disconnect, device number 15
[  172.887328][ T6500] device syzkaller0 entered promiscuous mode
[  172.914147][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  173.726157][ T5333] Bluetooth: (null): Invalid header checksum
[  173.794724][ T5333] Bluetooth: (null): Invalid header checksum
[  173.967951][ T5333] Bluetooth: (null): Invalid header checksum
[  174.156097][ T5333] Bluetooth: (null): Invalid header checksum
[  174.663344][ T4259] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  174.923363][ T4259] usb 4-1: Using ep0 maxpacket: 16
[  175.093708][ T4259] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.115288][ T4259] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  175.363473][ T4259] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  175.396217][ T4259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.442135][ T4259] usb 4-1: Product: syz
[  175.462210][ T4259] usb 4-1: Manufacturer: syz
[  175.512585][ T4259] usb 4-1: SerialNumber: syz
[  175.866938][ T6537] device syzkaller0 entered promiscuous mode
[  175.883928][ T4259] usb 4-1: 0:2 : does not exist
[  175.919693][ T4259] usb 4-1: USB disconnect, device number 9
[  175.946554][ T4228] Bluetooth: hci3: command 0x0406 tx timeout
[  175.946561][   T26] audit: type=1326 audit(1773342209.181:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44d90b799 code=0x7fc00000
[  176.038416][ T4228] Bluetooth: hci0: command 0x0406 tx timeout
[  176.073362][ T4228] Bluetooth: hci1: command 0x0406 tx timeout
[  176.083525][ T4228] Bluetooth: hci2: command 0x0406 tx timeout
[  176.096445][ T6541] netlink: 'syz.4.687': attribute type 1 has an invalid length.
[  176.142980][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.687'.
[  176.154019][ T6541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'.
[  176.196956][ T6541] device macvlan2 entered promiscuous mode
[  176.204947][ T6541] device bond9 entered promiscuous mode
[  176.215227][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  176.245710][ T6541] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  176.284162][ T6541] device bond9 left promiscuous mode
[  176.423436][ T4230] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  176.569284][ T6558] device syzkaller0 entered promiscuous mode
[  176.831616][ T5333] Bluetooth: (null): Invalid header checksum
[  176.868068][ T5333] Bluetooth: (null): Invalid header checksum
[  176.955220][ T5333] Bluetooth: (null): Invalid header checksum
[  177.055409][ T5333] Bluetooth: (null): Invalid header checksum
[  177.192882][ T5333] Bluetooth: (null): Invalid header checksum
[  177.287846][ T4230] usb 2-1: Using ep0 maxpacket: 16
[  177.503560][ T4230] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  177.517504][ T4230] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  177.542648][ T6572] device syzkaller0 entered promiscuous mode
[  177.734010][ T4230] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  177.774711][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.967758][ T4230] usb 2-1: Product: syz
[  178.032394][ T4230] usb 2-1: Manufacturer: syz
[  178.068749][ T4230] usb 2-1: SerialNumber: syz
[  178.300486][ T6597] device syzkaller0 entered promiscuous mode
[  178.377430][   T26] audit: type=1326 audit(1773342211.611:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fb86b799 code=0x7fc00000
[  178.432873][ T6600] netlink: 'syz.3.706': attribute type 1 has an invalid length.
[  178.475556][ T4230] usb 2-1: 0:2 : does not exist
[  178.482578][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.706'.
[  178.522526][ T4230] usb 2-1: USB disconnect, device number 15
[  178.557620][ T4464] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  178.574521][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.706'.
[  178.651906][ T6606] device macvlan2 entered promiscuous mode
[  178.667501][ T6606] device bond13 entered promiscuous mode
[  178.679665][ T6606] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  178.692168][ T6606] device bond13 left promiscuous mode
[  178.831414][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  178.849608][ T4464] usb 3-1: Using ep0 maxpacket: 16
[  179.002140][ T4464] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  179.031888][ T4464] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  179.126790][ T6622] device syzkaller0 entered promiscuous mode
[  179.273544][ T4464] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  179.300051][ T4464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.338816][ T4464] usb 3-1: Product: syz
[  179.343118][ T4464] usb 3-1: Manufacturer: syz
[  179.368579][ T4464] usb 3-1: SerialNumber: syz
[  179.386544][ T6628] ieee802154 phy0 wpan0: encryption failed: -22
[  179.753526][ T4464] usb 3-1: 0:2 : does not exist
[  179.796584][ T6637] device syzkaller0 entered promiscuous mode
[  180.022080][ T4464] usb 3-1: USB disconnect, device number 16
[  180.228044][ T6645] netlink: 'syz.4.720': attribute type 1 has an invalid length.
[  180.311113][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'.
[  180.335537][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'.
[  180.393215][   T26] audit: type=1326 audit(1773342213.631:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7a7aa799 code=0x7fc00000
[  180.647958][ T6645] device macvlan2 entered promiscuous mode
[  180.733403][ T4464] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  180.761580][ T6645] device bond10 entered promiscuous mode
[  180.867147][ T6645] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  180.991584][ T6645] device bond10 left promiscuous mode
[  181.279770][ T6661] device syzkaller0 entered promiscuous mode
[  181.433354][ T4464] usb 3-1: Using ep0 maxpacket: 16
[  181.449378][ T6671] device syzkaller0 entered promiscuous mode
[  181.573616][ T4464] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  181.599297][ T4464] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  181.803676][ T4464] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  181.820486][ T4464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.852351][ T4464] usb 3-1: Product: syz
[  181.867130][ T4464] usb 3-1: Manufacturer: syz
[  181.878572][ T4464] usb 3-1: SerialNumber: syz
[  181.983918][ T6685] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  182.053339][   T21] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  182.246586][ T4464] usb 3-1: 0:2 : does not exist
[  182.313890][   T21] usb 2-1: Using ep0 maxpacket: 16
[  182.436078][   T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  182.459768][ T4464] usb 3-1: USB disconnect, device number 17
[  182.529911][   T21] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  182.776985][   T26] audit: type=1326 audit(1773342216.021:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fb86b799 code=0x7fc00000
[  182.834136][   T21] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  182.934183][ T6693] netlink: 'syz.0.738': attribute type 1 has an invalid length.
[  182.941265][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.985104][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'.
[  182.997277][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  183.004790][   T21] usb 2-1: Product: syz
[  183.031770][ T6693] device macvlan2 entered promiscuous mode
[  183.040986][ T6693] device bond10 entered promiscuous mode
[  183.048237][ T6693] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  183.061827][ T6693] device bond10 left promiscuous mode
[  183.067539][   T21] usb 2-1: Manufacturer: syz
[  183.116522][   T21] usb 2-1: SerialNumber: syz
[  183.153904][ T6703] device syzkaller0 entered promiscuous mode
[  183.420675][ T6717] device syzkaller0 entered promiscuous mode
[  183.453695][   T21] usb 2-1: 0:2 : does not exist
[  183.467240][   T21] usb 2-1: USB disconnect, device number 16
[  183.821008][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  184.057570][ T5616] Bluetooth: (null): Invalid header checksum
[  184.126070][ T5616] Bluetooth: (null): Invalid header checksum
[  184.272505][ T5616] Bluetooth: (null): Invalid header checksum
[  184.515706][ T5616] Bluetooth: (null): Invalid header checksum
[  185.654901][   T26] audit: type=1326 audit(1773342218.901:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fb86b799 code=0x7fc00000
[  185.939983][ T6744] netlink: 'syz.4.753': attribute type 1 has an invalid length.
[  186.033369][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'.
[  186.073191][ T6749] device syzkaller0 entered promiscuous mode
[  186.111815][ T6744] device macvlan2 entered promiscuous mode
[  186.121667][ T6744] device bond11 entered promiscuous mode
[  186.130585][ T6744] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  186.149705][ T6744] device bond11 left promiscuous mode
[  186.163345][   T21] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  186.417797][   T21] usb 1-1: Using ep0 maxpacket: 16
[  186.485537][ T6760] device syzkaller0 entered promiscuous mode
[  186.543459][   T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  186.566486][   T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  186.733523][   T21] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  186.748784][   T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.768012][   T21] usb 1-1: Product: syz
[  186.777637][   T21] usb 1-1: Manufacturer: syz
[  186.789789][   T21] usb 1-1: SerialNumber: syz
[  186.853981][ T4230] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  187.776743][ T4230] usb 5-1: Using ep0 maxpacket: 16
[  187.893542][   T21] usb 1-1: 0:2 : does not exist
[  187.921330][   T21] usb 1-1: USB disconnect, device number 13
[  187.973465][ T4230] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  188.003574][ T4230] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  188.196778][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  188.616664][ T6795] netlink: 'syz.1.767': attribute type 1 has an invalid length.
[  188.703507][ T4230] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  188.716943][   T26] audit: type=1326 audit(1773342221.961:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.3.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fb86b799 code=0x7fc00000
[  188.881225][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.890617][ T4230] usb 5-1: Product: syz
[  188.895336][ T4230] usb 5-1: Manufacturer: syz
[  188.900686][ T4230] usb 5-1: SerialNumber: syz
[  188.940418][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.767'.
[  189.004746][ T6795] device macvlan2 entered promiscuous mode
[  189.012512][ T6795] device bond13 entered promiscuous mode
[  189.020301][ T6795] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  189.029770][ T6795] device bond13 left promiscuous mode
[  189.070872][ T6800] device syzkaller0 entered promiscuous mode
[  189.083505][ T6802] device syzkaller0 entered promiscuous mode
[  189.253513][ T4230] usb 5-1: 0:2 : does not exist
[  189.280970][ T4230] usb 5-1: USB disconnect, device number 16
[  189.648683][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  189.713691][   T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  190.043467][   T23] usb 4-1: Using ep0 maxpacket: 16
[  190.194766][   T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  190.443820][   T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  190.653400][   T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  192.032605][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.041837][   T23] usb 4-1: Product: syz
[  192.047043][   T23] usb 4-1: Manufacturer: syz
[  192.052373][   T23] usb 4-1: SerialNumber: syz
[  192.149640][ T6838] device syzkaller0 entered promiscuous mode
[  192.917555][   T26] audit: type=1326 audit(1773342226.161:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7a7aa799 code=0x7fc00000
[  193.037452][ T6845] device syzkaller0 entered promiscuous mode
[  193.043921][   T23] usb 4-1: 0:2 : does not exist
[  193.057771][   T23] usb 4-1: USB disconnect, device number 10
[  193.167311][ T6856] netlink: 'syz.0.782': attribute type 1 has an invalid length.
[  193.217480][ T6856] device macvlan2 entered promiscuous mode
[  193.227034][ T6856] device bond11 entered promiscuous mode
[  193.233988][ T6856] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  193.244667][ T6856] device bond11 left promiscuous mode
[  193.324184][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  194.244089][ T6876] Sensor A: =================  START STATUS  =================
[  194.916678][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  194.939856][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  196.415582][ T6876] Sensor A: Test Pattern: 75% Colorbar
[  196.421463][ T6876] Sensor A: Show Information: All
[  196.426898][ T6876] Sensor A: Vertical Flip: false
[  196.432123][ T6876] Sensor A: Horizontal Flip: false
[  196.437834][ T6876] Sensor A: Brightness: 128
[  196.442648][ T6876] Sensor A: Contrast: 128
[  196.447123][ T6876] Sensor A: Hue: 0
[  196.451107][ T6876] Sensor A: Saturation: 128
[  196.456292][ T6876] Sensor A: ==================  END STATUS  ==================
[  197.524147][   T23] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  198.434545][   T23] usb 1-1: Using ep0 maxpacket: 16
[  198.503644][   T26] audit: type=1326 audit(1773342231.731:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6886 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c83a799 code=0x7fc00000
[  198.563622][   T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  198.677840][ T6897] device syzkaller0 entered promiscuous mode
[  199.333417][   T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  199.344331][ T4225] Bluetooth: hci5: command 0x1003 tx timeout
[  199.350675][ T4196] Bluetooth: hci5: sending frame failed (-49)
[  199.396805][ T6905] netlink: 'syz.4.802': attribute type 1 has an invalid length.
[  199.502170][ T6905] device macvlan2 entered promiscuous mode
[  199.513531][   T23] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  199.526045][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.535127][   T23] usb 1-1: Product: syz
[  199.539667][   T23] usb 1-1: Manufacturer: syz
[  199.544794][   T23] usb 1-1: SerialNumber: syz
[  199.553994][ T6905] device bond12 entered promiscuous mode
[  199.561049][ T6905] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  199.618591][ T6905] device bond12 left promiscuous mode
[  199.648040][ T6917] lo speed is unknown, defaulting to 1000
[  199.825872][ T6923] device syzkaller1 entered promiscuous mode
[  199.833496][   T23] usb 1-1: 0:2 : does not exist
[  199.848367][   T23] usb 1-1: USB disconnect, device number 14
[  200.923852][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  201.235593][ T6942] device syzkaller0 entered promiscuous mode
[  201.383908][   T23] Bluetooth: hci5: command 0x1001 tx timeout
[  201.390857][ T4196] Bluetooth: hci5: sending frame failed (-49)
[  201.551131][   T26] audit: type=1326 audit(1773342234.791:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.2.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c83a799 code=0x7fc00000
[  201.960608][ T6960] netlink: 'syz.2.819': attribute type 1 has an invalid length.
[  203.637358][ T4225] Bluetooth: hci5: command 0x1009 tx timeout
[  204.004431][ T6983] device syzkaller0 entered promiscuous mode
[  205.411381][   T26] audit: type=1326 audit(1773342238.651:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.1.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7a7aa799 code=0x7fc00000
[  205.795452][ T7014] netlink: 'syz.1.832': attribute type 1 has an invalid length.
[  208.283006][ T7014] device macvlan2 entered promiscuous mode
[  208.323388][ T4227] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  208.430636][ T7014] device bond14 entered promiscuous mode
[  208.438484][ T7014] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  208.461204][ T7014] device bond14 left promiscuous mode
[  208.521624][ T7040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.840'.
[  208.574091][ T7038] device syzkaller0 entered promiscuous mode
[  208.884050][ T4227] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  208.977213][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.149103][ T4227] usb 1-1: Product: syz
[  209.251889][ T4227] usb 1-1: Manufacturer: syz
[  209.350712][ T4227] usb 1-1: SerialNumber: syz
[  209.581963][ T4227] usb 1-1: config 0 descriptor??
[  209.855918][ T4227] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  210.803890][ T4227] gspca_sunplus: reg_w_riv err -71
[  210.809785][ T4227] sunplus: probe of 1-1:0.0 failed with error -71
[  211.031182][ T4227] usb 1-1: USB disconnect, device number 15
[  211.834972][ T7059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.845'.
[  212.313611][   T26] audit: type=1326 audit(1773342245.541:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.2.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c83a799 code=0x7fc00000
[  219.039794][ T7102] netlink: 'syz.4.858': attribute type 1 has an invalid length.
[  220.340200][ T7108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.859'.
[  221.395149][   T26] audit: type=1326 audit(1773342254.641:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fb86b799 code=0x7fc00000
[  223.008754][ T7159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.873'.
[  223.031938][ T7160] netlink: 'syz.3.874': attribute type 1 has an invalid length.
[  223.057290][ T7163] netlink: 60 bytes leftover after parsing attributes in process `syz.0.875'.
[  223.070968][ T7163] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.081148][ T7163] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.163498][ T1107] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  223.443648][ T1107] usb 3-1: Using ep0 maxpacket: 16
[  223.607545][ T1107] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  223.636586][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.874'.
[  223.661895][ T1107] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  223.676673][ T7171] device macvlan2 entered promiscuous mode
[  223.752298][ T7171] device bond14 entered promiscuous mode
[  223.761947][ T7171] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  223.796026][ T7171] device bond14 left promiscuous mode
[  224.024792][ T1107] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  224.043992][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.054057][ T1107] usb 3-1: Product: syz
[  224.059060][ T1107] usb 3-1: Manufacturer: syz
[  224.071293][ T1107] usb 3-1: SerialNumber: syz
[  224.584891][   T26] audit: type=1326 audit(1773342257.831:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.4.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75c23c799 code=0x7fc00000
[  224.933599][ T1107] usb 3-1: 0:2 : does not exist
[  225.010957][ T1107] usb 3-1: USB disconnect, device number 18
[  225.228512][ T7207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.887'.
[  226.016118][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  226.143141][ T7218] netlink: 'syz.0.890': attribute type 1 has an invalid length.
[  226.221292][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.890'.
[  226.290835][ T7218] device macvlan2 entered promiscuous mode
[  226.315067][ T7218] device bond12 entered promiscuous mode
[  226.335213][ T7218] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  226.346273][ T7218] device bond12 left promiscuous mode
[  226.553408][   T23] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  226.893429][   T23] usb 2-1: Using ep0 maxpacket: 16
[  227.013528][   T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  227.052299][   T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  227.233665][   T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  227.254560][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.281337][   T23] usb 2-1: Product: syz
[  227.296729][   T23] usb 2-1: Manufacturer: syz
[  227.311349][   T23] usb 2-1: SerialNumber: syz
[  227.347886][   T26] audit: type=1326 audit(1773342260.591:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44d90b799 code=0x7fc00000
[  228.254233][   T23] usb 2-1: 0:2 : does not exist
[  228.435713][   T23] usb 2-1: USB disconnect, device number 17
[  228.803386][ T7049] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  228.973559][ T4226] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  229.413645][ T4226] usb 5-1: Using ep0 maxpacket: 16
[  229.603658][ T4226] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  229.631684][ T4226] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  229.644121][ T7261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.902'.
[  229.793768][ T7049] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  229.929664][ T7049] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  230.033457][ T4226] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  230.088522][ T7049] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  230.219780][ T7049] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.476465][ T7049] usb 1-1: config 0 descriptor??
[  231.373763][ T7049] usb 1-1: string descriptor 0 read error: -71
[  231.435467][ T7049] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71
[  231.534524][ T7049] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71
[  231.691172][ T7049] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71
[  231.833561][ T7049] uclogic 0003:256C:006D.0006: failed probing parameters: -71
[  232.004570][ T7049] uclogic: probe of 0003:256C:006D.0006 failed with error -71
[  232.237155][ T4226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.262881][ T4226] usb 5-1: Product: syz
[  232.268084][ T4226] usb 5-1: Manufacturer: syz
[  232.273072][ T4226] usb 5-1: SerialNumber: syz
[  232.301722][ T7049] usb 1-1: USB disconnect, device number 16
[  232.302682][ T4226] usb 5-1: can't set config #1, error -71
[  232.327545][ T4226] usb 5-1: USB disconnect, device number 17
[  233.133770][   T26] audit: type=1326 audit(1773342266.371:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c83a799 code=0x7fc00000
[  233.460587][ T7293] netlink: 'syz.1.910': attribute type 1 has an invalid length.
[  233.530111][ T4226] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  233.640590][ T7304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.915'.
[  233.983449][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.996900][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  234.008233][ T4226] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  234.019415][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.038711][ T4226] usb 5-1: config 0 descriptor??
[  234.819119][ T4226] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0
[  236.604453][ T4226] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0
[  236.611724][ T4226] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0
[  237.051137][ T4226] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0
[  237.058706][ T4226] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0
[  237.066274][ T4226] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0
[  237.073631][ T4226] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0
[  237.085196][ T4226] arvo 0003:1E7D:30D4.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0
[  237.120154][ T4226] arvo 0003:1E7D:30D4.0007: couldn't init struct arvo_device
[  237.137008][ T4226] arvo 0003:1E7D:30D4.0007: couldn't install keyboard
[  237.146042][ T4226] arvo: probe of 0003:1E7D:30D4.0007 failed with error -71
[  237.158708][ T4226] usb 5-1: USB disconnect, device number 18
[  238.157263][ T7342] fido_id[7342]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  238.160846][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.927'.
[  242.925407][ T7402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.943'.
[  244.183357][    T7] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  245.173457][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.680726][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.693920][    T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  245.709344][    T7] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  245.720532][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.830325][    T7] usb 1-1: config 0 descriptor??
[  246.013484][ T4227] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  246.380831][ T1336] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  246.882038][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.958'.
[  246.914388][    T7] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  246.933595][    T7] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  247.008967][ T4227] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  247.055442][ T4227] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03
[  247.083442][ T1336] usb 2-1: device descriptor read/64, error -71
[  247.110854][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.129651][ T4227] usb 5-1: config 0 descriptor??
[  247.175525][ T4227] pwc: Askey VC010 type 2 USB webcam detected.
[  247.306438][   T26] audit: type=1326 audit(1773342280.551:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.2.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c83a799 code=0x7fc00000
[  247.374086][ T1336] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  247.383721][ T4227] pwc: send_video_command error -71
[  247.389608][ T4227] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  247.398516][ T4227] Philips webcam: probe of 5-1:0.0 failed with error -71
[  247.413841][ T4227] usb 5-1: USB disconnect, device number 19
[  247.563328][ T1336] usb 2-1: device descriptor read/64, error -71
[  247.624795][   T23] Bluetooth: hci4: command 0x0406 tx timeout
[  247.662606][ T4227] usb 1-1: USB disconnect, device number 17
[  247.683722][ T1336] usb usb2-port1: attempt power cycle
[  248.026771][   T26] audit: type=1326 audit(1773342281.271:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.2.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fd29c83a799 code=0x7fc00000
[  248.103681][ T1336] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  248.233569][ T1336] usb 2-1: device descriptor read/8, error -71
[  248.285497][   T26] audit: type=1326 audit(1773342281.271:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.2.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c83a799 code=0x7fc00000
[  248.309793][    C0] vkms_vblank_simulate: vblank timer overrun
[  248.513397][ T1336] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  248.643764][ T1336] usb 2-1: device descriptor read/8, error -71
[  248.692149][   T26] audit: type=1326 audit(1773342281.271:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.2.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c83a799 code=0x7fc00000
[  248.773891][ T1336] usb usb2-port1: unable to enumerate USB device
[  248.783737][   T26] audit: type=1326 audit(1773342281.271:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.2.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c83a799 code=0x7fc00000
[  248.808790][   T26] audit: type=1326 audit(1773342281.271:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.2.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c83a799 code=0x7fc00000
[  248.834163][   T26] audit: type=1326 audit(1773342281.271:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.2.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c83a799 code=0x7fc00000
[  248.858140][   T26] audit: type=1326 audit(1773342281.271:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.2.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c83a799 code=0x7fc00000
[  248.883024][   T26] audit: type=1326 audit(1773342281.271:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.2.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c83a799 code=0x7fc00000
[  248.909322][   T26] audit: type=1326 audit(1773342281.271:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.2.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c83a799 code=0x7fc00000
[  249.034092][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.969'.
[  249.185836][ T7492] 8021q: adding VLAN 0 to HW filter on device bond17
[  249.241201][ T7492] 8021q: adding VLAN 0 to HW filter on device team0
[  249.252140][ T7492] bond17: (slave team0): Enslaving as an active interface with an up link
[  249.262143][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond17: link becomes ready
[  249.943590][   T23] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  250.213497][   T23] usb 2-1: Using ep0 maxpacket: 16
[  250.503439][ T7049] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  250.736432][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  250.963344][ T7049] usb 1-1: device descriptor read/64, error -71
[  251.090133][   T23] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  251.101381][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.132285][   T23] usb 2-1: Product: syz
[  251.136764][   T23] usb 2-1: Manufacturer: syz
[  251.142226][   T23] usb 2-1: SerialNumber: syz
[  251.482881][   T23] usb 2-1: config 0 descriptor??
[  251.544832][   T23] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  251.579786][   T23] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  251.593381][ T7049] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  251.785475][ T7049] usb 1-1: device descriptor read/64, error -71
[  252.459256][ T7049] usb usb1-port1: attempt power cycle
[  252.783675][   T23] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  253.205939][ T7538] overlayfs: failed to clone lowerpath
[  253.304670][   T23] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  253.323459][   T23] em28xx 2-1:0.0: board has no eeprom
[  253.418053][ T7551] IPv6: addrconf: prefix option has invalid lifetime
[  253.942678][   T23] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  253.972266][   T23] em28xx 2-1:0.0: dvb set to bulk mode.
[  254.036289][   T23] usb 2-1: USB disconnect, device number 22
[  254.054244][   T23] em28xx 2-1:0.0: Disconnecting em28xx
[  254.062823][ T4225] em28xx 2-1:0.0: Binding DVB extension
[  254.232337][ T4225] em28xx 2-1:0.0: Registering input extension
[  254.265897][   T23] em28xx 2-1:0.0: Closing input extension
[  254.369183][   T23] em28xx 2-1:0.0: Freeing device
[  255.705750][ T7540] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.714052][ T7540] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.785247][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  255.797104][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  256.066697][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  256.066728][   T26] audit: type=1326 audit(1773342289.311:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75c23c799 code=0x7ffc0000
[  256.481090][   T26] audit: type=1326 audit(1773342289.351:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75c23c799 code=0x7ffc0000
[  256.553514][   T26] audit: type=1326 audit(1773342289.351:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75c23c799 code=0x7ffc0000
[  256.647685][   T26] audit: type=1326 audit(1773342289.351:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75c23c799 code=0x7ffc0000
[  256.678158][   T26] audit: type=1326 audit(1773342289.351:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc75c23c799 code=0x7ffc0000
[  256.705608][   T26] audit: type=1326 audit(1773342289.351:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75c23c799 code=0x7ffc0000
[  256.729507][    C0] vkms_vblank_simulate: vblank timer overrun
[  256.740509][   T26] audit: type=1326 audit(1773342289.361:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75c23c799 code=0x7ffc0000
[  256.770248][   T26] audit: type=1326 audit(1773342289.361:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75c23c799 code=0x7ffc0000
[  256.794061][    C0] vkms_vblank_simulate: vblank timer overrun
[  256.802051][   T26] audit: type=1326 audit(1773342289.371:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc75c23c42b code=0x7ffc0000
[  256.825233][    C0] vkms_vblank_simulate: vblank timer overrun
[  256.832771][   T26] audit: type=1326 audit(1773342289.371:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc75c23c42b code=0x7ffc0000
[  256.943388][ T4229] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  257.007534][ T7540] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.037001][ T7540] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.133417][ T4229] usb 5-1: device descriptor read/64, error -71
[  257.318564][ T7540] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  257.328293][ T7540] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  257.338366][ T7540] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  257.348488][ T7540] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  257.425757][ T4229] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  260.806365][ T4229] usb 5-1: device descriptor read/64, error -71
[  260.864076][ T7616] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1002'.
[  260.923706][ T4229] usb usb5-port1: attempt power cycle
[  264.907093][ T7691] 8021q: adding VLAN 0 to HW filter on device bond15
[  264.977065][ T7694] bond5: (slave bond0): Releasing active interface
[  265.053359][ T7594] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  265.058004][ T7694] 8021q: adding VLAN 0 to HW filter on device bond0
[  265.085716][ T7694] bond15: (slave bond0): Enslaving as an active interface with an up link
[  265.149584][ T7047] IPv6: ADDRCONF(NETDEV_CHANGE): bond15: link becomes ready
[  265.293432][ T7594] usb 2-1: Using ep0 maxpacket: 16
[  265.413485][ T7594] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  265.517632][ T7594] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  266.013507][ T7594] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  267.093425][ T7594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.101899][ T7594] usb 2-1: Product: syz
[  267.107180][ T7594] usb 2-1: Manufacturer: syz
[  267.112326][ T7594] usb 2-1: SerialNumber: syz
[  267.413448][    T7] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  268.554101][ T7594] usb 2-1: 0:2 : does not exist
[  268.645370][ T7594] usb 2-1: USB disconnect, device number 23
[  268.776964][    T7] usb 1-1: Using ep0 maxpacket: 16
[  268.864205][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  268.909828][    T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  268.954978][    T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  269.193414][    T7] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  269.193438][ T7594] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  269.210882][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.243459][    T7] usb 1-1: can't set config #1, error -71
[  269.262948][    T7] usb 1-1: USB disconnect, device number 21
[  269.593460][ T7594] usb 5-1: Using ep0 maxpacket: 8
[  269.713984][ T7594] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  269.814150][ T7594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.457679][ T7594] pvrusb2: Hardware description: Terratec Grabster AV400
[  270.470489][ T7594] pvrusb2: **********
[  270.483639][ T7594] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  270.495395][ T7594] pvrusb2: Important functionality might not be entirely working.
[  270.513714][   T26] kauditd_printk_skb: 52 callbacks suppressed
[  270.513727][   T26] audit: type=1326 audit(1773342303.761:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.2.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c83a799 code=0x7fc00000
[  270.520001][ T7594] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  270.711050][ T7594] pvrusb2: **********
[  270.737082][ T7594] usb 5-1: USB disconnect, device number 23
[  270.744497][ T7594] pvrusb2: Device being rendered inoperable
[  270.805576][ T7810] device syzkaller0 entered promiscuous mode
[  271.223496][ T7811] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1036'.
[  271.600980][ T7814] netlink: 'syz.4.1040': attribute type 10 has an invalid length.
[  271.662501][ T7814] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  273.107752][ T7875] tipc: Started in network mode
[  273.127420][ T7875] tipc: Node identity 4, cluster identity 4711
[  273.160595][ T7875] tipc: Node number set to 4
[  274.049251][ T7881] netlink: 'syz.3.1051': attribute type 4 has an invalid length.
[  274.156711][ T7886] device syzkaller0 entered promiscuous mode
[  274.298384][ T7892] autofs4:pid:7892:autofs_fill_super: called with bogus options
[  274.825956][ T7899] netlink: 'syz.3.1056': attribute type 10 has an invalid length.
[  275.874737][ T7933] device syzkaller0 entered promiscuous mode
[  275.977449][   T26] audit: type=1326 audit(1773342309.221:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.3.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fb86b799 code=0x7fc00000
[  276.273556][ T7049] Bluetooth: hci4: command 0x2016 tx timeout
[  277.053457][   T26] audit: type=1326 audit(1773342310.241:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.1.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7a7aa799 code=0x7fc00000
[  277.304689][   T26] audit: type=1326 audit(1773342310.551:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fb86b799 code=0x7ffc0000
[  277.369322][   T26] audit: type=1326 audit(1773342310.551:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f15fb86b799 code=0x7ffc0000
[  278.313584][   T26] audit: type=1326 audit(1773342310.551:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fb86b799 code=0x7ffc0000
[  278.405051][   T26] audit: type=1326 audit(1773342310.551:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fb86b799 code=0x7ffc0000
[  278.750314][ T7981] device syzkaller0 entered promiscuous mode
[  278.973670][ T7986] netlink: 'syz.4.1085': attribute type 1 has an invalid length.
[  279.009132][ T7986] 8021q: adding VLAN 0 to HW filter on device bond14
[  279.065563][ T7986] 8021q: adding VLAN 0 to HW filter on device team0
[  279.110548][ T7986] bond14: (slave team0): Enslaving as an active interface with an up link
[  279.134043][ T7050] IPv6: ADDRCONF(NETDEV_CHANGE): bond14: link becomes ready
[  279.273396][   T21] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  279.485834][ T7049] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  279.511780][ T7049] Bluetooth: hci1: Injecting HCI hardware error event
[  279.523658][ T4196] Bluetooth: hci1: hardware error 0x00
[  280.213478][   T21] usb 3-1: Using ep0 maxpacket: 16
[  280.233523][   T23] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  280.516773][   T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  280.530751][   T21] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  281.614317][   T23] usb 5-1: Using ep0 maxpacket: 16
[  281.655134][ T8023] device syzkaller0 entered promiscuous mode
[  281.678945][   T21] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  281.690364][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.706162][   T21] usb 3-1: Product: syz
[  281.711286][   T21] usb 3-1: Manufacturer: syz
[  281.717483][   T21] usb 3-1: SerialNumber: syz
[  281.740923][ T8027] netlink: 'syz.3.1098': attribute type 1 has an invalid length.
[  281.759573][   T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  281.763721][ T8027] 8021q: adding VLAN 0 to HW filter on device bond16
[  281.788293][   T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  281.832614][ T8027] bond15: (slave bond0): Releasing backup interface
[  281.868567][ T8027] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.878119][ T8027] bond16: (slave bond0): Enslaving as an active interface with an up link
[  281.887807][ T7051] IPv6: ADDRCONF(NETDEV_CHANGE): bond16: link becomes ready
[  282.123952][   T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  282.145076][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.156297][   T21] usb 3-1: 0:2 : does not exist
[  282.169287][   T23] usb 5-1: Product: syz
[  282.178556][   T23] usb 5-1: Manufacturer: syz
[  282.392668][   T23] usb 5-1: SerialNumber: syz
[  282.411265][   T21] usb 3-1: USB disconnect, device number 19
[  282.503422][   T23] usb 5-1: can't set config #1, error -71
[  282.537391][   T23] usb 5-1: USB disconnect, device number 24
[  282.747211][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  284.703475][ T8074] process 'syz.4.1112' launched '/dev/fd/5' with NULL argv: empty string added
[  285.786198][ T4360] Bluetooth: hci5: Frame reassembly failed (-84)
[  285.813913][ T4360] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0
[  286.204249][ T8102] netlink: 'syz.3.1119': attribute type 1 has an invalid length.
[  286.243663][ T8102] 8021q: adding VLAN 0 to HW filter on device bond17
[  286.282156][ T8102] bond16: (slave bond0): Releasing backup interface
[  286.331857][ T8102] 8021q: adding VLAN 0 to HW filter on device bond0
[  286.346479][ T8102] bond17: (slave bond0): Enslaving as an active interface with an up link
[  286.356702][ T6120] IPv6: ADDRCONF(NETDEV_CHANGE): bond17: link becomes ready
[  286.623360][ T1107] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  286.923407][ T1107] usb 5-1: Using ep0 maxpacket: 16
[  287.063606][ T1107] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  287.090265][ T1107] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  288.119859][ T4226] Bluetooth: hci5: command 0x1003 tx timeout
[  288.127734][ T4191] Bluetooth: hci5: sending frame failed (-49)
[  288.146840][ T7049] Bluetooth: hci4: command 0x0405 tx timeout
[  288.213462][ T1107] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  288.232074][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.240919][ T1107] usb 5-1: Product: syz
[  288.245703][ T1107] usb 5-1: Manufacturer: syz
[  288.251228][ T1107] usb 5-1: SerialNumber: syz
[  288.994326][ T1107] usb 5-1: 0:2 : does not exist
[  289.167699][ T1107] usb 5-1: USB disconnect, device number 25
[  289.484742][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  290.193866][   T23] Bluetooth: hci5: command 0x1001 tx timeout
[  290.208147][ T4196] Bluetooth: hci5: sending frame failed (-49)
[  290.304000][ T8154] netlink: 'syz.3.1133': attribute type 1 has an invalid length.
[  290.343819][ T8154] 8021q: adding VLAN 0 to HW filter on device bond18
[  290.363670][ T8155] bond17: (slave bond0): Releasing backup interface
[  290.438229][ T8155] 8021q: adding VLAN 0 to HW filter on device bond0
[  290.464674][ T8155] bond18: (slave bond0): Enslaving as an active interface with an up link
[  290.495394][ T7050] IPv6: ADDRCONF(NETDEV_CHANGE): bond18: link becomes ready
[  290.713337][ T1336] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  291.998384][ T8183] netlink: 'syz.0.1139': attribute type 6 has an invalid length.
[  292.057364][ T8186] netlink: 'syz.3.1142': attribute type 1 has an invalid length.
[  292.077736][ T1336] usb 2-1: Using ep0 maxpacket: 16
[  292.103094][ T8186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1142'.
[  292.122178][ T8186] device macvlan2 entered promiscuous mode
[  292.137516][ T8186] device bond19 entered promiscuous mode
[  292.146636][ T8186] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  292.177644][ T8186] device bond19 left promiscuous mode
[  292.272353][   T23] Bluetooth: hci5: command 0x1009 tx timeout
[  293.087305][ T1336] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  293.099396][ T1336] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  293.923462][ T1336] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  293.938070][ T1336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.983622][ T1336] usb 2-1: can't set config #1, error -71
[  294.113622][ T1336] usb 2-1: USB disconnect, device number 24
[  294.292978][ T8230] netlink: 'syz.3.1156': attribute type 1 has an invalid length.
[  294.397520][ T8233] device syzkaller0 entered promiscuous mode
[  294.421341][ T8232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1156'.
[  294.514371][ T8232] device macvlan2 entered promiscuous mode
[  294.530184][ T8232] device bond20 entered promiscuous mode
[  294.565335][ T8232] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  294.604430][ T8232] device bond20 left promiscuous mode
[  294.761863][   T26] audit: type=1326 audit(1773342328.001:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.1.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7a7aa799 code=0x7fc00000
[  294.825719][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'.
[  295.373431][   T23] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  295.843611][   T23] usb 1-1: Using ep0 maxpacket: 16
[  296.643495][   T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  296.663565][   T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  296.859156][ T8271] device syzkaller0 entered promiscuous mode
[  296.993844][   T23] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  297.136956][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.160542][   T23] usb 1-1: Product: syz
[  297.165142][   T23] usb 1-1: Manufacturer: syz
[  297.217713][   T23] usb 1-1: SerialNumber: syz
[  297.359755][ T8278] netlink: 'syz.3.1169': attribute type 1 has an invalid length.
[  297.393971][ T8278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1169'.
[  297.409082][ T8278] device macvlan2 entered promiscuous mode
[  297.439739][ T8278] device bond21 entered promiscuous mode
[  297.448071][ T8278] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  297.458297][ T8278] device bond21 left promiscuous mode
[  297.499339][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1170'.
[  297.684322][   T23] usb 1-1: 0:2 : does not exist
[  297.820607][   T23] usb 1-1: USB disconnect, device number 22
[  298.305323][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  298.334570][   T26] audit: type=1326 audit(1773342331.571:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8282 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29c83a799 code=0x7fc00000
[  300.484556][ T8338] netlink: 'syz.3.1184': attribute type 1 has an invalid length.
[  300.560343][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1185'.
[  300.601672][ T8338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1184'.
[  300.659897][ T8338] device macvlan2 entered promiscuous mode
[  300.744991][ T8338] device bond22 entered promiscuous mode
[  300.752175][ T8338] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  300.799737][ T8338] device bond22 left promiscuous mode
[  301.069414][ T4226] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  301.343352][ T4226] usb 1-1: Using ep0 maxpacket: 16
[  301.383386][    T7] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  301.483559][ T4226] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  301.503323][ T4226] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  301.634012][    T7] usb 5-1: Using ep0 maxpacket: 16
[  301.680422][ T8362] Sensor A: =================  START STATUS  =================
[  301.690078][ T4226] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  301.710152][ T4226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.727931][ T8362] Sensor A: Test Pattern: 75% Colorbar
[  301.745722][ T4226] usb 1-1: Product: syz
[  301.750566][ T4226] usb 1-1: Manufacturer: syz
[  301.771892][   T26] audit: type=1326 audit(1773342335.001:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fb86b799 code=0x7fc00000
[  301.775500][ T4226] usb 1-1: SerialNumber: syz
[  301.796445][    T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  301.802579][ T8362] Sensor A: Show Information: 
[  301.833380][    T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  301.849756][ T8362] All
[  301.852629][ T8362] Sensor A: Vertical Flip: false
[  301.901720][ T8362] Sensor A: Horizontal Flip: false
[  301.917822][ T8362] Sensor A: Brightness: 128
[  302.033445][    T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  302.093584][ T8362] Sensor A: Contrast: 128
[  302.234300][ T4226] usb 1-1: 0:2 : does not exist
[  302.248126][ T8362] Sensor A: Hue: 0
[  302.359880][ T8362] Sensor A: Saturation: 128
[  302.447583][ T4226] usb 1-1: USB disconnect, device number 23
[  302.496941][ T8362] Sensor A: ==================  END STATUS  ==================
[  303.152979][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.163193][    T7] usb 5-1: Product: syz
[  303.167714][    T7] usb 5-1: Manufacturer: syz
[  303.173321][    T7] usb 5-1: SerialNumber: syz
[  303.209124][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  304.026391][    T7] usb 5-1: 0:2 : does not exist
[  304.061826][    T7] usb 5-1: USB disconnect, device number 26
[  304.684529][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  304.833807][ T8396] bond18: (slave bond0): Releasing backup interface
[  304.856401][ T8399] netlink: 'syz.4.1199': attribute type 1 has an invalid length.
[  305.000638][ T8402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1199'.
[  305.191374][ T8414] device syzkaller0 entered promiscuous mode
[  305.442058][ T8418] Sensor A: =================  START STATUS  =================
[  305.482912][ T8418] Sensor A: Test Pattern: 75% Colorbar
[  305.513122][ T8418] Sensor A: Show Information: All
[  305.553581][ T8418] Sensor A: Vertical Flip: false
[  305.571280][ T8418] Sensor A: Horizontal Flip: false
[  305.580730][ T8418] Sensor A: Brightness: 128
[  305.587280][ T8418] Sensor A: Contrast: 128
[  305.591948][ T8418] Sensor A: Hue: 0
[  305.783918][ T8418] Sensor A: Saturation: 128
[  305.794765][   T26] audit: type=1326 audit(1773342339.041:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8405 comm="syz.3.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fb86b799 code=0x7fc00000
[  305.848943][ T8418] Sensor A: ==================  END STATUS  ==================
[  307.993511][ T7049] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  308.079497][ T8449] netlink: 'syz.1.1213': attribute type 1 has an invalid length.
[  308.124367][ T8449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1213'.
[  308.139534][ T8449] device macvlan2 entered promiscuous mode
[  308.148697][ T8449] device bond15 entered promiscuous mode
[  308.157506][ T8449] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  308.196935][ T8449] device bond15 left promiscuous mode
[  308.254059][ T7049] usb 1-1: Using ep0 maxpacket: 16
[  308.273715][ T8454] bond14: (slave team0): Releasing backup interface
[  308.373713][ T7049] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  308.390998][ T7049] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  308.574335][ T7049] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  308.596501][ T7049] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.654928][ T7049] usb 1-1: Product: syz
[  308.684804][ T7049] usb 1-1: Manufacturer: syz
[  308.722831][ T7049] usb 1-1: SerialNumber: syz
[  309.153020][ T8470] Sensor A: =================  START STATUS  =================
[  309.161887][ T7049] usb 1-1: 0:2 : does not exist
[  309.183699][ T8470] Sensor A: Test Pattern: 75% Colorbar
[  309.189398][ T8470] Sensor A: Show Information: All
[  309.204445][ T8470] Sensor A: Vertical Flip: false
[  309.209688][ T8470] Sensor A: Horizontal Flip: false
[  309.222261][ T7049] usb 1-1: USB disconnect, device number 24
[  309.246821][ T8470] Sensor A: Brightness: 128
[  309.263540][ T8470] Sensor A: Contrast: 128
[  309.281289][ T8470] Sensor A: Hue: 0
[  309.318276][   T26] audit: type=1326 audit(1773342342.561:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7a7aa799 code=0x7fc00000
[  309.473016][ T8470] Sensor A: Saturation: 128
[  309.640642][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  309.670795][ T8470] Sensor A: ==================  END STATUS  ==================
[  311.503381][ T1336] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  311.943440][ T1336] usb 5-1: Using ep0 maxpacket: 16
[  312.083605][ T1336] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  312.123672][ T8505] netlink: 'syz.3.1228': attribute type 1 has an invalid length.
[  312.133547][ T1336] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  312.192096][ T8510] bond23: (slave vxcan7): The slave device specified does not support setting the MAC address
[  312.204016][ T8510] bond23: (slave vxcan7): Error -22 calling dev_set_mtu
[  312.358654][ T1336] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  312.399408][ T1336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.441906][ T1336] usb 5-1: Product: syz
[  312.457444][ T1336] usb 5-1: Manufacturer: syz
[  312.491898][ T1336] usb 5-1: SerialNumber: syz
[  312.834706][ T7049] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  312.853830][ T1336] usb 5-1: 0:2 : does not exist
[  312.948166][ T1336] usb 5-1: USB disconnect, device number 27
[  313.010305][   T26] audit: type=1326 audit(1773342346.251:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.0.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44d90b799 code=0x7fc00000
[  313.104009][ T7049] usb 2-1: Using ep0 maxpacket: 16
[  313.244118][ T7049] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  313.256416][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  313.260598][ T7049] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  313.494733][ T7049] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  313.520598][ T7049] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.559114][ T7049] usb 2-1: Product: syz
[  313.579076][ T7049] usb 2-1: Manufacturer: syz
[  313.602056][ T7049] usb 2-1: SerialNumber: syz
[  314.093576][ T7049] usb 2-1: 0:2 : does not exist
[  314.766346][ T7049] usb 2-1: USB disconnect, device number 25
[  315.242786][ T8554] netlink: 'syz.2.1242': attribute type 1 has an invalid length.
[  315.369195][ T8561] bond18: (slave vxcan5): The slave device specified does not support setting the MAC address
[  315.436522][ T8561] bond18: (slave vxcan5): Error -22 calling dev_set_mtu
[  315.545375][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  315.573087][ T8566] Sensor A: =================  START STATUS  =================
[  315.598167][ T8566] Sensor A: Test Pattern: 75% Colorbar
[  315.733392][ T8566] Sensor A: Show Information: All
[  315.739531][ T8566] Sensor A: Vertical Flip: false
[  315.745905][ T8566] Sensor A: Horizontal Flip: false
[  315.754407][ T8566] Sensor A: Brightness: 128
[  315.759772][ T8566] Sensor A: Contrast: 128
[  315.764725][ T8566] Sensor A: Hue: 0
[  315.768994][ T8566] Sensor A: Saturation: 128
[  315.956452][ T8566] Sensor A: ==================  END STATUS  ==================
[  316.399350][   T26] audit: type=1326 audit(1773342349.641:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7a7aa799 code=0x7fc00000
[  316.963330][ T1107] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  317.228899][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  317.240043][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  317.370502][ T1107] usb 3-1: Using ep0 maxpacket: 16
[  317.650913][ T1107] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  318.070615][ T1107] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  318.453967][ T1107] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  318.503682][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.603869][ T1107] usb 3-1: Product: syz
[  318.666565][ T1107] usb 3-1: Manufacturer: syz
[  318.715953][ T1107] usb 3-1: SerialNumber: syz
[  319.173611][ T1107] usb 3-1: 0:2 : does not exist
[  319.240784][ T1107] usb 3-1: USB disconnect, device number 20
[  319.258873][ T8607] netlink: 'syz.4.1256': attribute type 1 has an invalid length.
[  319.318729][ T8615] bond15: (slave vxcan13): The slave device specified does not support setting the MAC address
[  319.344020][ T8615] bond15: (slave vxcan13): Error -22 calling dev_set_mtu
[  319.493339][ T4229] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  319.535524][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  319.742111][ T8625] Sensor A: =================  START STATUS  =================
[  319.783531][ T8625] Sensor A: Test Pattern: 75% Colorbar
[  319.796997][ T8625] Sensor A: Show Information: All
[  319.826129][ T8625] Sensor A: Vertical Flip: false
[  319.833401][ T4229] usb 1-1: Using ep0 maxpacket: 16
[  319.849458][ T8625] Sensor A: Horizontal Flip: false
[  319.879275][ T8625] Sensor A: Brightness: 128
[  319.884610][ T8625] Sensor A: Contrast: 128
[  319.889378][ T8625] Sensor A: Hue: 0
[  319.894951][ T8625] Sensor A: Saturation: 128
[  319.899778][ T8625] Sensor A: ==================  END STATUS  ==================
[  319.973668][ T4229] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  320.067584][   T26] audit: type=1326 audit(1773342353.311:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15fb86b799 code=0x7fc00000
[  320.083598][ T4229] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  320.454150][ T4229] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  320.508204][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.626594][ T4229] usb 1-1: Product: syz
[  320.692730][ T4229] usb 1-1: Manufacturer: syz
[  320.759076][ T4229] usb 1-1: SerialNumber: syz
[  321.293531][ T4229] usb 1-1: 0:2 : does not exist
[  321.381599][ T4229] usb 1-1: USB disconnect, device number 25
[  322.344868][    C0] ==================================================================
[  322.353959][    C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490
[  322.361632][    C0] Read of size 2 at addr ffff88802584982a by task syz.3.1266/8643
[  322.370207][    C0] 
[  322.372747][    C0] CPU: 0 PID: 8643 Comm: syz.3.1266 Not tainted syzkaller #0
[  322.380833][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  322.391368][    C0] Call Trace:
[  322.395012][    C0]  <IRQ>
[  322.398133][    C0]  dump_stack_lvl+0x188/0x250
[  322.403387][    C0]  ? show_regs_print_info+0x20/0x20
[  322.409171][    C0]  ? _printk+0xda/0x130
[  322.413694][    C0]  ? rose_timer_expiry+0x470/0x490
[  322.418938][    C0]  ? load_image+0x400/0x400
[  322.423933][    C0]  print_address_description+0x60/0x2d0
[  322.430422][    C0]  ? rose_timer_expiry+0x470/0x490
[  322.436092][    C0]  kasan_report+0xdf/0x130
[  322.440644][    C0]  ? rose_timer_expiry+0x470/0x490
[  322.446653][    C0]  rose_timer_expiry+0x470/0x490
[  322.451797][    C0]  ? rose_start_t1timer+0xd0/0xd0
[  322.457016][    C0]  call_timer_fn+0x17b/0x540
[  322.462023][    C0]  ? rose_start_t1timer+0xd0/0xd0
[  322.467381][    C0]  ? __run_timers+0x800/0x800
[  322.472396][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  322.477698][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  322.483016][    C0]  ? rose_start_t1timer+0xd0/0xd0
[  322.488668][    C0]  __run_timers+0x53e/0x800
[  322.493598][    C0]  ? detach_timer+0x2b0/0x2b0
[  322.498760][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  322.505656][    C0]  ? sched_clock_cpu+0x15/0x3c0
[  322.510962][    C0]  ? ktime_get_real_ts64+0x440/0x440
[  322.516547][    C0]  run_timer_softirq+0x63/0xf0
[  322.521517][    C0]  handle_softirqs+0x339/0x830
[  322.526954][    C0]  ? __irq_exit_rcu+0x13b/0x230
[  322.532119][    C0]  ? do_softirq+0x210/0x210
[  322.536737][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[  322.542053][    C0]  __irq_exit_rcu+0x13b/0x230
[  322.547103][    C0]  ? irq_exit_rcu+0x20/0x20
[  322.551973][    C0]  irq_exit_rcu+0x5/0x20
[  322.556583][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  322.562505][    C0]  </IRQ>
[  322.565797][    C0]  <TASK>
[  322.568912][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  322.575531][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120
[  322.582843][    C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 2f 8a 8c f7 65 8b 05 d0 97 3c 76 85 c0 74 3c 48 c7 04 24 0e 36
[  322.604351][    C0] RSP: 0018:ffffc900041bf5e0 EFLAGS: 00000206
[  322.610697][    C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 2409d8a5c6933400
[  322.619298][    C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: 0000000000000001
[  322.628003][    C0] RBP: ffffc900041bf678 R08: ffffffff901d4177 R09: 1ffffffff203a82e
[  322.636877][    C0] R10: dffffc0000000000 R11: fffffbfff203a82f R12: dffffc0000000000
[  322.645400][    C0] R13: 1ffff11005818644 R14: ffff88802c0c31c8 R15: 1ffff92000837ebc
[  322.654154][    C0]  ? _raw_spin_unlock+0x40/0x40
[  322.659389][    C0]  __skb_try_recv_datagram+0x179/0x4d0
[  322.665052][    C0]  ? sock_load_diag_module+0x130/0x130
[  322.670977][    C0]  __unix_dgram_recvmsg+0x301/0xd90
[  322.676476][    C0]  ? unix_unhash+0x10/0x10
[  322.681438][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  322.687039][    C0]  ? mark_lock+0x94/0x320
[  322.691663][    C0]  ? unix_dgram_recvmsg+0xb2/0xd0
[  322.696939][    C0]  ? unix_dgram_sendmsg+0x18a0/0x18a0
[  322.703138][    C0]  ____sys_recvmsg+0x2cd/0x5e0
[  322.708817][    C0]  ? __sys_recvmsg_sock+0x40/0x40
[  322.714211][    C0]  ? import_iovec+0x6f/0xa0
[  322.719179][    C0]  ___sys_recvmsg+0x21a/0x5c0
[  322.724143][    C0]  ? __sys_recvmsg+0x280/0x280
[  322.729117][    C0]  ? __lock_acquire+0x7d10/0x7d10
[  322.734896][    C0]  ? __might_fault+0xb3/0x110
[  322.740041][    C0]  do_recvmmsg+0x382/0x850
[  322.744659][    C0]  ? __sys_recvmmsg+0x290/0x290
[  322.749720][    C0]  ? __lock_acquire+0x7d10/0x7d10
[  322.755473][    C0]  __x64_sys_recvmmsg+0x195/0x250
[  322.761230][    C0]  ? do_recvmmsg+0x850/0x850
[  322.766230][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  322.772012][    C0]  do_syscall_64+0x4c/0xa0
[  322.776623][    C0]  ? clear_bhb_loop+0x30/0x80
[  322.781593][    C0]  ? clear_bhb_loop+0x30/0x80
[  322.786562][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  322.793265][    C0] RIP: 0033:0x7f15fb86b799
[  322.797976][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  322.819854][    C0] RSP: 002b:00007f15f9aa4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  322.828659][    C0] RAX: ffffffffffffffda RBX: 00007f15fbae5090 RCX: 00007f15fb86b799
[  322.837016][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  322.845274][    C0] RBP: 00007f15fb901c99 R08: 0000000000000000 R09: 0000000000000000
[  322.853436][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  322.861680][    C0] R13: 00007f15fbae5128 R14: 00007f15fbae5090 R15: 00007ffec7274cc8
[  322.870294][    C0]  </TASK>
[  322.873516][    C0] 
[  322.876067][    C0] Allocated by task 4372:
[  322.881103][    C0]  __kasan_kmalloc+0xb5/0xf0
[  322.886425][    C0]  rose_add_node+0x227/0xdb0
[  322.891561][    C0]  rose_rt_ioctl+0xa2b/0xe70
[  322.896815][    C0]  rose_ioctl+0x2a7/0x7d0
[  322.901601][    C0]  sock_do_ioctl+0xfb/0x320
[  322.906490][    C0]  sock_ioctl+0x4d2/0x710
[  322.911026][    C0]  __se_sys_ioctl+0xfa/0x170
[  322.915640][    C0]  do_syscall_64+0x4c/0xa0
[  322.920173][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  322.926436][    C0] 
[  322.928765][    C0] Freed by task 8633:
[  322.933011][    C0]  kasan_set_track+0x4b/0x70
[  322.937903][    C0]  kasan_set_free_info+0x1f/0x40
[  322.942846][    C0]  ____kasan_slab_free+0xd5/0x110
[  322.948411][    C0]  slab_free_freelist_hook+0xea/0x170
[  322.954411][    C0]  kfree+0xef/0x2a0
[  322.958840][    C0]  rose_rt_device_down+0x4e2/0x530
[  322.964663][    C0]  rose_device_event+0x606/0x6c0
[  322.970136][    C0]  raw_notifier_call_chain+0xcb/0x160
[  322.975694][    C0]  __dev_notify_flags+0x158/0x300
[  322.980907][    C0]  dev_change_flags+0xe3/0x1a0
[  322.985969][    C0]  dev_ifsioc+0x130/0xd50
[  322.991270][    C0]  dev_ioctl+0x545/0xe30
[  322.996243][    C0]  sock_do_ioctl+0x245/0x320
[  323.001224][    C0]  sock_ioctl+0x4d2/0x710
[  323.006361][    C0]  __se_sys_ioctl+0xfa/0x170
[  323.011420][    C0]  do_syscall_64+0x4c/0xa0
[  323.016526][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  323.023170][    C0] 
[  323.026036][    C0] The buggy address belongs to the object at ffff888025849800
[  323.026036][    C0]  which belongs to the cache kmalloc-512 of size 512
[  323.042942][    C0] The buggy address is located 42 bytes inside of
[  323.042942][    C0]  512-byte region [ffff888025849800, ffff888025849a00)
[  323.059538][    C0] The buggy address belongs to the page:
[  323.066157][    C0] page:ffffea0000961200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888025848800 pfn:0x25848
[  323.080026][    C0] head:ffffea0000961200 order:2 compound_mapcount:0 compound_pincount:0
[  323.089494][    C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  323.098375][    C0] raw: 00fff00000010200 ffffea0001863608 ffffea000180cc08 ffff888016c41c80
[  323.107954][    C0] raw: ffff888025848800 000000000010000e 00000001ffffffff 0000000000000000
[  323.117526][    C0] page dumped because: kasan: bad access detected
[  323.125173][    C0] page_owner tracks the page as allocated
[  323.131507][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2192, ts 10470195762, free_ts 0
[  323.150629][    C0]  get_page_from_freelist+0x1bbd/0x1ca0
[  323.156823][    C0]  __alloc_pages+0x1ee/0x480
[  323.161519][    C0]  new_slab+0xc0/0x4b0
[  323.165599][    C0]  ___slab_alloc+0x80a/0xdd0
[  323.170731][    C0]  kmem_cache_alloc_trace+0x1a5/0x2a0
[  323.176467][    C0]  alloc_bprm+0x56/0x6a0
[  323.181076][    C0]  kernel_execve+0x49/0x900
[  323.185671][    C0]  call_usermodehelper_exec_async+0x207/0x350
[  323.192009][    C0]  ret_from_fork+0x1f/0x30
[  323.197062][    C0] page_owner free stack trace missing
[  323.202698][    C0] 
[  323.205391][    C0] Memory state around the buggy address:
[  323.211413][    C0]  ffff888025849700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  323.220745][    C0]  ffff888025849780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  323.229801][    C0] >ffff888025849800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  323.238488][    C0]                                   ^
[  323.244714][    C0]  ffff888025849880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  323.253610][    C0]  ffff888025849900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  323.262386][    C0] ==================================================================
[  323.270970][    C0] Disabling lock debugging due to kernel taint
[  323.277419][    C0] vkms_vblank_simulate: vblank timer overrun
[  323.283943][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  323.291593][    C0] CPU: 0 PID: 8643 Comm: syz.3.1266 Tainted: G    B             syzkaller #0
[  323.300985][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  323.311785][    C0] Call Trace:
[  323.315157][    C0]  <IRQ>
[  323.318620][    C0]  dump_stack_lvl+0x188/0x250
[  323.323399][    C0]  ? show_regs_print_info+0x20/0x20
[  323.329235][    C0]  ? load_image+0x400/0x400
[  323.333943][    C0]  panic+0x2e5/0x810
[  323.337939][    C0]  ? bpf_jit_dump+0xd0/0xd0
[  323.342573][    C0]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  323.348662][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  323.354893][    C0]  ? _raw_spin_unlock+0x40/0x40
[  323.360049][    C0]  ? print_memory_metadata+0x314/0x400
[  323.365822][    C0]  ? rose_timer_expiry+0x470/0x490
[  323.370969][    C0]  check_panic_on_warn+0x80/0xa0
[  323.376660][    C0]  ? rose_timer_expiry+0x470/0x490
[  323.382211][    C0]  end_report+0x6d/0xf0
[  323.386715][    C0]  kasan_report+0x102/0x130
[  323.391314][    C0]  ? rose_timer_expiry+0x470/0x490
[  323.397324][    C0]  rose_timer_expiry+0x470/0x490
[  323.402708][    C0]  ? rose_start_t1timer+0xd0/0xd0
[  323.408176][    C0]  call_timer_fn+0x17b/0x540
[  323.412947][    C0]  ? rose_start_t1timer+0xd0/0xd0
[  323.418307][    C0]  ? __run_timers+0x800/0x800
[  323.423090][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  323.429038][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  323.434374][    C0]  ? rose_start_t1timer+0xd0/0xd0
[  323.440066][    C0]  __run_timers+0x53e/0x800
[  323.444967][    C0]  ? detach_timer+0x2b0/0x2b0
[  323.449926][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  323.456468][    C0]  ? sched_clock_cpu+0x15/0x3c0
[  323.461771][    C0]  ? ktime_get_real_ts64+0x440/0x440
[  323.467074][    C0]  run_timer_softirq+0x63/0xf0
[  323.472188][    C0]  handle_softirqs+0x339/0x830
[  323.477247][    C0]  ? __irq_exit_rcu+0x13b/0x230
[  323.482897][    C0]  ? do_softirq+0x210/0x210
[  323.487693][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[  323.493169][    C0]  __irq_exit_rcu+0x13b/0x230
[  323.498799][    C0]  ? irq_exit_rcu+0x20/0x20
[  323.504197][    C0]  irq_exit_rcu+0x5/0x20
[  323.509108][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  323.515706][    C0]  </IRQ>
[  323.519060][    C0]  <TASK>
[  323.522349][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  323.528840][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120
[  323.536067][    C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 2f 8a 8c f7 65 8b 05 d0 97 3c 76 85 c0 74 3c 48 c7 04 24 0e 36
[  323.557230][    C0] RSP: 0018:ffffc900041bf5e0 EFLAGS: 00000206
[  323.563661][    C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 2409d8a5c6933400
[  323.572531][    C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: 0000000000000001
[  323.580689][    C0] RBP: ffffc900041bf678 R08: ffffffff901d4177 R09: 1ffffffff203a82e
[  323.589107][    C0] R10: dffffc0000000000 R11: fffffbfff203a82f R12: dffffc0000000000
[  323.597903][    C0] R13: 1ffff11005818644 R14: ffff88802c0c31c8 R15: 1ffff92000837ebc
[  323.607176][    C0]  ? _raw_spin_unlock+0x40/0x40
[  323.612345][    C0]  __skb_try_recv_datagram+0x179/0x4d0
[  323.618393][    C0]  ? sock_load_diag_module+0x130/0x130
[  323.624125][    C0]  __unix_dgram_recvmsg+0x301/0xd90
[  323.629772][    C0]  ? unix_unhash+0x10/0x10
[  323.634200][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  323.639821][    C0]  ? mark_lock+0x94/0x320
[  323.644334][    C0]  ? unix_dgram_recvmsg+0xb2/0xd0
[  323.649896][    C0]  ? unix_dgram_sendmsg+0x18a0/0x18a0
[  323.655894][    C0]  ____sys_recvmsg+0x2cd/0x5e0
[  323.661213][    C0]  ? __sys_recvmsg_sock+0x40/0x40
[  323.666362][    C0]  ? import_iovec+0x6f/0xa0
[  323.671430][    C0]  ___sys_recvmsg+0x21a/0x5c0
[  323.676647][    C0]  ? __sys_recvmsg+0x280/0x280
[  323.681884][    C0]  ? __lock_acquire+0x7d10/0x7d10
[  323.687820][    C0]  ? __might_fault+0xb3/0x110
[  323.693507][    C0]  do_recvmmsg+0x382/0x850
[  323.698217][    C0]  ? __sys_recvmmsg+0x290/0x290
[  323.703634][    C0]  ? __lock_acquire+0x7d10/0x7d10
[  323.709028][    C0]  __x64_sys_recvmmsg+0x195/0x250
[  323.714377][    C0]  ? do_recvmmsg+0x850/0x850
[  323.719811][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  323.726231][    C0]  do_syscall_64+0x4c/0xa0
[  323.731278][    C0]  ? clear_bhb_loop+0x30/0x80
[  323.736496][    C0]  ? clear_bhb_loop+0x30/0x80
[  323.741799][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  323.748348][    C0] RIP: 0033:0x7f15fb86b799
[  323.754101][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  323.775734][    C0] RSP: 002b:00007f15f9aa4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  323.785299][    C0] RAX: ffffffffffffffda RBX: 00007f15fbae5090 RCX: 00007f15fb86b799
[  323.794756][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  323.803362][    C0] RBP: 00007f15fb901c99 R08: 0000000000000000 R09: 0000000000000000
[  323.812248][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  323.820960][    C0] R13: 00007f15fbae5128 R14: 00007f15fbae5090 R15: 00007ffec7274cc8
[  323.829913][    C0]  </TASK>
[  323.835245][    C0] Kernel Offset: disabled
[  323.840120][    C0] Rebooting in 86400 seconds..