last executing test programs:

14.742662446s ago: executing program 0 (id=433):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"})
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffff6, 0xfffffffffffffffd, 0x4, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0xfffffffffffffffd, 0x1000000000c27, 0x9, 0x7fffffffffffffff, 0x663, 0x7fffffff}, 0x0, 0x0)
syz_usb_disconnect(r0)
socket(0x10, 0x3, 0x0)

14.722089076s ago: executing program 3 (id=434):
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r2 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=<r3=>0x0)
prlimit64(r3, 0xd, &(0x7f0000000200)={0x3, 0x7ff}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@loopback, @remote, <r4=>0x0}, &(0x7f0000000340))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002100)=@newchain={0xdb0, 0x64, 0x1, 0x5, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xe}, {0x4, 0x982a9d66151476e3}, {0xffe0, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_fw={{0x7}, {0xd74, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'bond_slave_1\x00'}, @TCA_FW_POLICE={0x86c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x2be, 0x0, 0x101, 0x1ff, 0x3, 0x8, 0xfffffff5, 0x0, 0x3, 0x5, 0x3, 0x9, 0x4, 0x5, 0x0, 0x8000, 0x1000, 0xbf4, 0x5, 0x40, 0x6, 0x6, 0x100, 0x7, 0x9, 0x5, 0x6, 0x4, 0x5, 0x4, 0xc, 0x29, 0x5, 0x5, 0x2, 0xf, 0x9, 0xa, 0x3, 0x5, 0x400, 0x80000001, 0x4, 0x2, 0x2, 0x100, 0x32d, 0xfffff2d7, 0x6, 0xb, 0x9, 0x2, 0xf, 0x3, 0x7f, 0xbd, 0x6, 0x8, 0x9, 0x200, 0x1000, 0x3, 0x7, 0xfffffffd, 0x6, 0x7ff, 0xa3ff, 0x3, 0x4, 0x10001, 0x81, 0x6, 0x9, 0x3, 0x81, 0x9, 0x362f, 0x3fa, 0x2, 0x4, 0x0, 0xffffbe15, 0x0, 0x300, 0x3, 0x4, 0x4, 0x8, 0x8, 0x5, 0x4, 0x4, 0x1ff, 0x0, 0x7ff, 0x5, 0xfffffffc, 0xd157, 0x5, 0xaf, 0x9, 0x9, 0x6f, 0x5, 0x9, 0x8, 0x3, 0x1, 0x4, 0xe, 0xd, 0x4, 0x7, 0xfffffff2, 0x6d, 0x3, 0xa58, 0x9, 0x8001, 0x1, 0x10000, 0x800000, 0x7fffffff, 0x35, 0x1, 0x5, 0x8b7a, 0x50, 0x1000, 0x7, 0x6, 0x5, 0x7fffffff, 0x1000, 0x6ed5, 0x2000, 0xfffffffc, 0x8, 0xa6, 0x3, 0x7, 0x13, 0x0, 0x4, 0x1000, 0xa7, 0x1, 0x4, 0x4, 0x8, 0x80000001, 0xfffffff8, 0x7, 0x0, 0x800, 0x0, 0x160, 0x80, 0x6, 0xff, 0x7, 0xfa32, 0x9, 0x1, 0x5, 0x10000, 0x6, 0x4040, 0x0, 0x1, 0xd292, 0x8, 0x7ff, 0x24c, 0xb0000000, 0xffffffff, 0x1ff, 0x5, 0x2, 0x3, 0x8, 0x9, 0x0, 0xfffffff5, 0x4, 0x58, 0x200, 0x9, 0x0, 0x5, 0x7, 0x1, 0x4, 0x800, 0x9, 0xffff, 0x1, 0xb50, 0x10, 0x9, 0x8, 0x6, 0x200, 0xe, 0x0, 0x7, 0x3, 0x5, 0x401, 0x3, 0x80000001, 0x800, 0x3, 0x6, 0xac, 0x0, 0x7, 0x7, 0xb48, 0x6, 0x9, 0x3, 0x7d5, 0x0, 0xfffffff9, 0x2, 0x6, 0x8001, 0x10001, 0x0, 0x7ff, 0x0, 0x8, 0x4, 0x4, 0x2, 0x5, 0x8fb, 0x8, 0x2, 0x8, 0x6, 0x1cf, 0x4, 0xd, 0xfffffe01, 0x5b8842d7, 0x100, 0x7, 0x0, 0x6, 0x738d, 0x1, 0x5861, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x0, 0xc, 0x2238, 0xe, {0x7, 0x2, 0x5, 0x9, 0x6, 0x8}, {0x7, 0x1, 0x101, 0xe969, 0x86, 0x4}, 0x77e354cf, 0x8, 0xd}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x2, 0x6, 0x10, 0x4, 0xb6a, 0x1, 0xfffffff7, 0x9, 0x7ff, 0x4, 0x5, 0x10001, 0x1, 0x6, 0x2, 0x7, 0x100, 0x401, 0x5, 0x6, 0x1, 0x1ec, 0x3, 0x2, 0x0, 0x9, 0x6, 0x91, 0x1000, 0x7, 0x7, 0x2, 0xff, 0x3, 0x7, 0x5, 0x8, 0x6, 0xfffffffc, 0x3, 0x2, 0x800, 0x4, 0x4, 0x5, 0x4, 0xfffffff7, 0x7, 0x3, 0x5, 0x2, 0x8f, 0x7, 0xb80c, 0xbc3b, 0x7, 0x9, 0x1592, 0xfc, 0x8, 0x540, 0xfffffff7, 0x7, 0x7, 0x5, 0x71d3e5a4, 0x8000, 0x9e, 0x2, 0x7, 0x4, 0x200, 0x9, 0x6, 0xab, 0x10001, 0x4, 0x1, 0x8, 0x9d82, 0x80, 0x4, 0x0, 0x3, 0x4, 0x2, 0xa50, 0x8, 0xfffffeff, 0x7ff, 0x1000, 0x611, 0x7ff, 0x1, 0x9, 0x800, 0xfffffff9, 0x6, 0x100, 0x5, 0x5a3, 0x9, 0x9, 0x7, 0x2, 0x5, 0x7, 0x1ff, 0x101, 0xae2, 0x4, 0x400, 0x7, 0x8001, 0x4, 0xfffffff7, 0x1, 0x68000000, 0x10, 0x9, 0x8000, 0x20, 0x4, 0x7, 0x3, 0xff, 0xb20a, 0x7, 0xbc, 0xfffffffb, 0x8, 0x5, 0x0, 0xffffff01, 0x4, 0x874, 0x4, 0x4, 0x80, 0xda, 0xe81, 0x1, 0x3, 0x9, 0x1, 0x0, 0x1, 0x2, 0x2ce, 0x4df, 0x200, 0x0, 0x80000000, 0x5, 0x8000, 0x8, 0x6, 0x0, 0x9, 0x2, 0x100, 0x4e, 0x64b, 0x8, 0x5, 0xb8e, 0x0, 0xfffffc08, 0x100, 0x0, 0x4, 0x9, 0x2, 0xf2b2, 0x5, 0xe69, 0x80000000, 0xd8c, 0x6, 0x8001, 0x4, 0x84, 0x1, 0x2, 0x5ce1, 0x28, 0x3800000, 0x3, 0xa0, 0x6, 0x8, 0x6, 0x8, 0xe, 0x3, 0x2, 0x40, 0x666, 0xd, 0x0, 0x1, 0x2, 0xc, 0x200, 0x6, 0xcb, 0x6, 0x9, 0x4, 0x9, 0x4, 0xe71, 0x7, 0x3, 0x3, 0x2, 0x3, 0x8, 0x51ab, 0x3, 0xd, 0x0, 0x554, 0x1, 0x800, 0x7, 0x7, 0xfffffffb, 0x825, 0x16, 0x80000000, 0xb1c, 0x5, 0x6, 0x3, 0x8, 0x9, 0x3, 0x68, 0xfc, 0x1, 0xa30, 0x4c, 0x1, 0x9, 0x6, 0x4, 0x100, 0x81, 0x8, 0x5, 0x3, 0x19c7079c, 0x0, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40}]}, @TCA_FW_POLICE={0x488, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x10001, 0x5, 0x1, 0x974, 0x7, 0x78e4, 0x5, 0x100, 0x3, 0x6, 0x0, 0x401, 0x3, 0xde3, 0x81, 0x1, 0x4, 0x100, 0x200, 0x80000000, 0x7fff, 0x1, 0x79, 0x6, 0xf, 0x2813, 0x401, 0x3f, 0x0, 0x5, 0x876, 0x1, 0x0, 0x7a0, 0x5, 0x1, 0x2, 0x4, 0x4, 0x5, 0xd, 0xd21e, 0x2, 0xfffffffb, 0x72, 0x6, 0x8, 0xfff, 0x3, 0x4, 0x1a7, 0x0, 0x1, 0x1, 0x0, 0x36b5, 0xa4b1, 0x0, 0xb0, 0x4, 0x7, 0x0, 0x400, 0x711a, 0x2, 0x2, 0x0, 0x119, 0x9, 0x1, 0x200, 0x4, 0x8000, 0x8, 0x4, 0x7, 0x3, 0xe, 0xfd, 0x7, 0x6, 0x6, 0x7, 0x4, 0x0, 0x9, 0x3, 0x1ccad6c, 0x2, 0x86, 0x80, 0x7fc0, 0x5, 0x4, 0x3, 0x7, 0x7, 0x6, 0x3, 0x30, 0x5, 0x5, 0xfffffe00, 0xfffffffb, 0x4, 0x7, 0x1, 0x8001, 0x80000000, 0x5, 0x9, 0x7, 0x6f2, 0xe, 0xf14, 0xd2a, 0x4, 0x1, 0x2, 0x60000000, 0x2, 0x3, 0x3, 0x1c8, 0xffff8000, 0xb, 0x6, 0x147, 0x6, 0x40, 0x3, 0x2, 0x4, 0x6, 0x644d5b12, 0x7, 0x5, 0x800, 0x5, 0x100, 0x7, 0x3, 0x200, 0x6, 0x9, 0x9, 0x6, 0x1, 0x2, 0x1, 0x9, 0x9, 0x5, 0x100, 0x2, 0x9, 0x9, 0x1, 0x200, 0x3ff, 0x80000001, 0x1, 0x6, 0xffffb93a, 0x3, 0x6, 0xb, 0x94, 0x7, 0x2, 0x10000, 0x4, 0x40, 0x7a, 0x443d, 0x1, 0x0, 0x0, 0x6e69, 0x3, 0xc09, 0xfffffffc, 0xb, 0x1, 0x3, 0x10000, 0xa9a1, 0x0, 0xfd3, 0x11, 0x8, 0x993, 0x6, 0xe1, 0x6, 0xad0, 0x400000, 0x4, 0x3, 0x10001, 0x1, 0x9, 0xffff, 0x101, 0x0, 0x6, 0x1, 0x700, 0x7, 0x0, 0xe, 0x0, 0x5, 0x4, 0x7fff, 0x9, 0x10001, 0xfffffff8, 0xd8, 0x6, 0x8ae, 0x80000000, 0x5, 0x3, 0x2506, 0x2, 0x50, 0xf, 0xfffffffe, 0xb6, 0xc08, 0xc12f, 0xd, 0x5, 0x2d6d, 0x6, 0xffff, 0x8, 0xc9, 0x6a90, 0x1, 0x59b0bfb7, 0x101, 0x8, 0x0, 0xb, 0x2, 0x2, 0x6, 0xfffff801, 0x4, 0x3e7, 0x1, 0x40, 0xfff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffeffff, 0x3, 0x5, 0x89fc, 0xfb7e, {0x9, 0x0, 0xd, 0x81, 0x55f9, 0x3ff}, {0x6, 0x0, 0x3, 0x1, 0x624d, 0x4f}, 0x1, 0x448b, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x869b, 0x2, 0x7, 0x1, 0xfff, {0x10, 0x1, 0x9, 0x4, 0x5, 0xb1c}, {0x2, 0x1, 0xfff6, 0x8001, 0x9, 0xb2}, 0x4, 0x7, 0x6}}]}, @TCA_FW_ACT={0x54, 0x4, [@m_connmark={0x50, 0x6, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0xffffffffffffffff, 0xff, 0x5d85}, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'wg0\x00'}]}}]}, 0xdb0}}, 0x20000000)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

14.245879897s ago: executing program 3 (id=435):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
fsopen(0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x80000008, 0xffff8001, 0x5, 0x30003900, 0x6, 0x2, 0x9}]})

13.267054888s ago: executing program 3 (id=442):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)
ppoll(&(0x7f0000000000)=[{r0, 0x441}], 0x1, 0x0, 0x0, 0x0)

12.27784572s ago: executing program 0 (id=444):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f00004d1000/0x3000)=nil, 0x3000, 0xb635773f06ebbee7, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0)
rmdir(0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x10000131)
write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)

10.590828847s ago: executing program 1 (id=448):
syz_open_dev$cec(&(0x7f00000001c0), 0xffffffffffffffff, 0x10000)
syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020603000000000000000000060000020500050002000000050029ae8899ad2f040000001240001000000900020073797a3000000000050002000000000014000300060073683a69702c70a972742c697000"], 0x58}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000000)
r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r4)
r5 = syz_open_dev$dri(0x0, 0x9ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, 0x0)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee4, 0x0, 0x0, 0x0}, 0x94)

10.49481052s ago: executing program 0 (id=450):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

10.368822442s ago: executing program 0 (id=452):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
fsopen(0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x80000008, 0xffff8001, 0x5, 0x30003900, 0x6, 0x2, 0x9}]})

8.446308954s ago: executing program 3 (id=455):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x28004044, &(0x7f0000000180)={0xa, 0x4001, 0xfffc, @private1, 0xfffffffd}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
open_tree(0xffffffffffffffff, 0x0, 0x0)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
preadv(r1, &(0x7f00000001c0), 0x0, 0x400, 0x20000000)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r6, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab7809009fd1e00d96072000001ea89de2b7fb0000e60080b8000000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900000000000000980000000000000100", [0x100000000, 0x8000000000000000]}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
msgget(0x2, 0x300)

7.372706018s ago: executing program 1 (id=457):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x220, 0xe4, 0x14}, 0x18)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304})
writev(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

7.253548581s ago: executing program 2 (id=459):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)

7.037217265s ago: executing program 2 (id=460):
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x2, 0x5, 0x7)
getsockopt$bt_hci(r0, 0x84, 0x2, &(0x7f0000001100)=""/4112, &(0x7f0000000300)=0x1010)
sendmsg$key(0xffffffffffffffff, 0x0, 0x4000)
r1 = socket$kcm(0x10, 0x2, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x42, 0x0)
recvmsg(r1, &(0x7f0000004180)={0x0, 0x0, 0x0}, 0x60)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
acct(&(0x7f00000001c0)='./file0\x00')
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030003000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150000100000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000940)=[0x0])
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0)
symlink(0x0, 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fcntl$lock(r3, 0x24, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)

5.397728471s ago: executing program 4 (id=461):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240))
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0)

5.306891374s ago: executing program 1 (id=462):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
getpeername(r2, &(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000440)=0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x100)
socket$kcm(0x29, 0x2, 0x0)

5.235718635s ago: executing program 4 (id=463):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}})

4.977826921s ago: executing program 4 (id=464):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x17bb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc3})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0))

3.425711745s ago: executing program 2 (id=465):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
writev(r0, &(0x7f0000005a80)=[{&(0x7f0000000440)="edd535", 0x3}], 0x1)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)
ppoll(&(0x7f0000000000)=[{r0, 0x441}], 0x1, 0x0, 0x0, 0x0)

3.414371885s ago: executing program 1 (id=466):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0x2, 0x403, 0xbbf, 0x0, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x8], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x10007fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x1, 0x9, 0x56200, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x6, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x9, 0x1, 0x0, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20006854}, 0x800)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xef, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304})
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)='S', 0x1}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3.002855944s ago: executing program 1 (id=467):
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x48}}, 0x440088c4)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x64, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x4}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8c1}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r3, 0xa)
io_setup(0x3ff, 0x0)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
fcntl$setstatus(r3, 0x4, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r5}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000400)=""/82}, 0x20)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x170, 0xc8, 0x8, 0x170, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [0x0, 0xff], [], 'lo\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x0, 0x55}, 0x0, 0xa8, 0x110, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x6, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x7, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054)

2.634840632s ago: executing program 0 (id=468):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xfff1, 0x8}, {0x10, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20002000}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2.608871222s ago: executing program 4 (id=469):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x11, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

2.498526635s ago: executing program 2 (id=470):
r0 = socket(0x10, 0x3, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000080)={@local, @broadcast, @void, {@generic={0x4305}}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)})
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0)
close(r3)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7}]})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
ioctl$TUNGETVNETLE(r3, 0x40107446, &(0x7f0000000180))
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r5, 0x0, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, 0x0)
ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})

2.238332861s ago: executing program 0 (id=471):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, 0x0, <r3=>0x0}, 0xfffffe14)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1)
creat(&(0x7f0000000140)='./file0\x00', 0x34)
dup3(r1, r4, 0x6700000000000000)
syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0xa921, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)

2.103762554s ago: executing program 4 (id=472):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x13, 0x1b}}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x1, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}}, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000080)={0x3})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005140000001100"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40)

2.066002385s ago: executing program 3 (id=473):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x220, 0xe4, 0x14}, 0x18)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304})
writev(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2.065485735s ago: executing program 2 (id=474):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
getpeername(r2, &(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000440)=0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x100)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008811)
socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x300000b, 0x11, r3, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1a, 0x28, 0x66, 0x0, 0x3, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x23}}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x4ede, 0x0, 0xec6}}}}}}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xb, "2a16561edfd2f20ab3ed4a"}})

670.832425ms ago: executing program 4 (id=475):
syz_open_procfs(0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
r1 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x400, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write(r1, 0x81, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0)

230.698585ms ago: executing program 3 (id=476):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
getpeername(r2, &(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000440)=0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x100)
socket$kcm(0x29, 0x2, 0x0)

24.76285ms ago: executing program 2 (id=477):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0x2, 0x403, 0xbbf, 0x0, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x8], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x10007fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x1, 0x9, 0x56200, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x6, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x9, 0x1, 0x0, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20006854}, 0x800)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xef, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304})
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)='S', 0x1}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

0s ago: executing program 1 (id=478):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
fsopen(0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f021})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x80000008, 0xffff8001, 0x5, 0x30003900, 0x6, 0x2, 0x9}]})

kernel console output (not intermixed with test programs):

atadv0: Adding interface: batadv_slave_1
[   67.940578][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.966907][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.979010][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.986108][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.013566][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.045025][ T4197] team0: Port device team_slave_0 added
[   68.060009][ T4187] device hsr_slave_0 entered promiscuous mode
[   68.067080][ T4187] device hsr_slave_1 entered promiscuous mode
[   68.084740][ T4197] team0: Port device team_slave_1 added
[   68.093742][ T4195] device hsr_slave_0 entered promiscuous mode
[   68.100917][ T4195] device hsr_slave_1 entered promiscuous mode
[   68.107639][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.115914][ T4195] Cannot create hsr debugfs directory
[   68.193852][ T4189] device hsr_slave_0 entered promiscuous mode
[   68.200843][ T4189] device hsr_slave_1 entered promiscuous mode
[   68.207415][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.218219][ T4189] Cannot create hsr debugfs directory
[   68.224357][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.231670][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.257981][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.291240][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.298637][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.324804][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.340156][ T4188] device hsr_slave_0 entered promiscuous mode
[   68.346998][ T4188] device hsr_slave_1 entered promiscuous mode
[   68.351204][   T23] Bluetooth: hci0: command 0x0409 tx timeout
[   68.360041][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.367729][ T4188] Cannot create hsr debugfs directory
[   68.418095][   T13] Bluetooth: hci4: command 0x0409 tx timeout
[   68.424355][   T13] Bluetooth: hci2: command 0x0409 tx timeout
[   68.428337][   T23] Bluetooth: hci3: command 0x0409 tx timeout
[   68.430853][   T13] Bluetooth: hci1: command 0x0409 tx timeout
[   68.544698][ T4197] device hsr_slave_0 entered promiscuous mode
[   68.552226][ T4197] device hsr_slave_1 entered promiscuous mode
[   68.559591][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.567313][ T4197] Cannot create hsr debugfs directory
[   68.760057][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   68.772634][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.784706][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.804768][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.855304][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   68.867733][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   68.891565][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   68.901160][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   68.947510][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   68.977068][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   68.992395][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   69.012264][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   69.051423][ T4197] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   69.077712][ T4197] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   69.091056][ T4197] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   69.105570][ T4197] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   69.144474][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.181789][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.194643][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.207604][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.227360][ T4187] 8021q: adding VLAN 0 to HW filter on device team0
[   69.259860][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   69.271852][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.281385][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.293082][ T4195] 8021q: adding VLAN 0 to HW filter on device team0
[   69.309496][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   69.319570][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.330032][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.339754][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.347008][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.356991][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   69.384465][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   69.397883][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.406876][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.418908][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.426011][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.450582][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   69.463514][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.480180][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.489809][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.499729][ T1408] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.506842][ T1408] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.515465][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   69.525122][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   69.536765][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   69.545842][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   69.555484][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   69.564796][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   69.574049][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.583033][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.592666][ T1408] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.600002][ T1408] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.609620][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   69.620980][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   69.629927][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   69.664416][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   69.673843][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   69.686530][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   69.700965][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   69.710702][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   69.721638][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   69.731157][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   69.744663][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   69.753275][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.763097][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.773697][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.793484][ T4189] 8021q: adding VLAN 0 to HW filter on device team0
[   69.805973][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   69.815637][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   69.845931][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   69.867160][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.900228][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.910145][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.919259][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   69.928899][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   69.940155][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   69.949036][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   69.957535][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.966838][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.976881][ T1408] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.984023][ T1408] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.992945][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   70.001836][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   70.010818][ T1408] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.017980][ T1408] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.028156][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   70.042389][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   70.053128][ T4197] 8021q: adding VLAN 0 to HW filter on device team0
[   70.081089][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   70.096953][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   70.106863][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   70.123581][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   70.133370][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.140675][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.157548][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   70.167539][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   70.183033][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   70.193700][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   70.207266][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.214440][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.250923][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   70.270053][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   70.279872][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.289672][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   70.302206][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   70.311946][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.320703][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.336179][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   70.346815][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   70.361460][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   70.404724][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   70.414824][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.423444][    T7] Bluetooth: hci0: command 0x041b tx timeout
[   70.431425][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.440874][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.448787][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   70.465221][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   70.476534][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.486438][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   70.499035][    T7] Bluetooth: hci1: command 0x041b tx timeout
[   70.507782][    T7] Bluetooth: hci3: command 0x041b tx timeout
[   70.514237][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.524904][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.533907][    T7] Bluetooth: hci2: command 0x041b tx timeout
[   70.539159][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.541548][    T7] Bluetooth: hci4: command 0x041b tx timeout
[   70.556171][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.569938][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.582063][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.595064][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   70.609036][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.616593][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   70.646894][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   70.660993][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   70.706717][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[   70.733907][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.752734][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   70.766700][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   70.787661][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.794951][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.830209][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   70.841556][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   70.860477][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   70.877021][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   70.897111][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   70.907067][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.914269][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.931635][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   70.962548][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   70.972756][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   70.982459][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.027996][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   71.035911][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   71.054073][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   71.072288][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   71.082460][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   71.091670][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   71.101708][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   71.110902][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   71.120267][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.127792][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.136072][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   71.146200][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   71.156075][ T4187] device veth0_vlan entered promiscuous mode
[   71.170109][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   71.179740][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   71.193339][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.201177][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.216303][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.255285][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.272696][ T4187] device veth1_vlan entered promiscuous mode
[   71.301713][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[   71.308649][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[   71.361714][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   71.375128][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   71.386031][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   71.404980][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.414931][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   71.424617][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.434144][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.443138][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.452865][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   71.461544][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   71.478392][ T4195] device veth0_vlan entered promiscuous mode
[   71.505493][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   71.519128][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.535026][ T4187] device veth0_macvtap entered promiscuous mode
[   71.557340][ T4195] device veth1_vlan entered promiscuous mode
[   71.577334][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   71.596217][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   71.609264][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   71.624813][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.633828][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.643496][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.652364][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.662231][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   71.671828][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   71.680783][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   71.689487][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   71.697359][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   71.707084][ T4189] device veth0_vlan entered promiscuous mode
[   71.718754][ T4187] device veth1_macvtap entered promiscuous mode
[   71.738171][ T4197] device veth0_vlan entered promiscuous mode
[   71.767098][ T4189] device veth1_vlan entered promiscuous mode
[   71.793209][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   71.802642][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   71.811452][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   71.820262][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.828894][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.843171][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.853954][ T4197] device veth1_vlan entered promiscuous mode
[   71.873359][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   71.882772][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.893822][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   71.903029][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   71.916363][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.930411][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.940349][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.950198][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.959280][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.976804][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.985830][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.996765][ T4195] device veth0_macvtap entered promiscuous mode
[   72.010865][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.048623][ T4195] device veth1_macvtap entered promiscuous mode
[   72.095112][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.110444][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.119807][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.128956][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.162098][ T4189] device veth0_macvtap entered promiscuous mode
[   72.170444][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.180517][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.191243][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.200976][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.210211][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.221192][ T4197] device veth0_macvtap entered promiscuous mode
[   72.236424][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.247379][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.265244][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.276835][ T4189] device veth1_macvtap entered promiscuous mode
[   72.301460][ T4197] device veth1_macvtap entered promiscuous mode
[   72.324967][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.334513][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.344036][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.352445][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.361936][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.373185][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.384377][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.396188][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.424047][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.434123][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.449551][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.458680][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.468895][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.477639][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.498629][ T4233] Bluetooth: hci0: command 0x040f tx timeout
[   72.508626][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.516946][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.526459][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.539270][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.552848][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.564512][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.576376][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.579212][ T4235] Bluetooth: hci2: command 0x040f tx timeout
[   72.589242][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.597753][ T4235] Bluetooth: hci3: command 0x040f tx timeout
[   72.601238][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.612811][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.618898][ T4235] Bluetooth: hci1: command 0x040f tx timeout
[   72.626129][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.629602][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.664316][ T4188] device veth0_vlan entered promiscuous mode
[   72.672518][ T4235] Bluetooth: hci4: command 0x040f tx timeout
[   72.676826][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.691301][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.701541][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.712899][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.723197][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.733978][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.745774][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.755806][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.767513][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.777701][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.789501][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.801814][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.817716][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.828374][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.836665][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.845795][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.855699][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.864804][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.889340][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.900606][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.912189][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.924111][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.934655][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.945998][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.959244][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.968052][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.977044][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.987065][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.996162][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.021894][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.033373][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.047504][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.066868][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.077471][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.086638][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.107073][ T4188] device veth1_vlan entered promiscuous mode
[   73.133638][ T3069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.143895][ T3069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.168390][ T1408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.176329][ T1408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.199551][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.207516][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.325532][ T1408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.346716][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.359456][ T1408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.373093][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.405457][ T3069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.416932][ T3069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.448327][ T4188] device veth0_macvtap entered promiscuous mode
[   73.470285][ T4188] device veth1_macvtap entered promiscuous mode
[   73.477982][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.487517][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.496971][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.505616][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.563260][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.587668][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.601371][ T4270] device syzkaller0 entered promiscuous mode
[   73.616258][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.630765][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.640706][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.651726][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.666212][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.696393][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.716720][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.730053][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.751676][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.769611][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.777636][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.787275][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.811905][ T4270] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1'.
[   73.813003][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.832843][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.844213][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.856770][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.858255][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.871764][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.890985][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.901900][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.912600][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.923597][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.935485][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.958259][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.966262][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.974644][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.985176][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.993350][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.002516][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.054062][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.064645][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.073635][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.083630][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.253821][ T4277] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   74.276266][ T4252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.293734][ T4252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.335819][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.383338][ T4284] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   74.452912][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.500300][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.530736][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.603480][ T1325] Bluetooth: hci0: command 0x0419 tx timeout
[   74.661327][ T1325] Bluetooth: hci1: command 0x0419 tx timeout
[   74.683474][ T4289] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   74.698729][ T1325] Bluetooth: hci3: command 0x0419 tx timeout
[   74.704966][ T1325] Bluetooth: hci2: command 0x0419 tx timeout
[   74.738164][ T4235] Bluetooth: hci4: command 0x0419 tx timeout
[   74.748074][ T1111] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   74.782506][ T4296] loop3: detected capacity change from 0 to 64
[   75.011507][ T4300] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[   75.027282][ T4302] device syzkaller0 entered promiscuous mode
[   75.050854][ T4300] device syzkaller0 entered promiscuous mode
[   75.072654][ T4302] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13'.
[   75.093539][ T4300] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   75.118143][ T1111] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   75.136914][ T1111] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   75.228322][ T1111] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   75.243849][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   75.252322][ T1111] usb 3-1: SerialNumber: syz
[   75.498145][ T4267] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   75.552831][ T1111] usb 3-1: 0:2 : does not exist
[   75.616143][ T1111] usb 3-1: USB disconnect, device number 2
[   75.683970][ T1325] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   75.708583][ T4198] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   75.768133][ T4267] usb 4-1: Using ep0 maxpacket: 32
[   75.901625][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   75.918487][ T4267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[   75.929949][ T1325] usb 2-1: Using ep0 maxpacket: 16
[   75.938385][ T4267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   75.958581][ T4267] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF6, skipping
[   76.048074][ T1325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   76.063246][ T1325] usb 2-1: config 0 has no interfaces?
[   76.138305][ T4198] usb 1-1: unable to get BOS descriptor or descriptor too short
[   76.158285][ T4267] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[   76.167648][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.186062][ T4267] usb 4-1: Product: syz
[   76.197969][ T4267] usb 4-1: Manufacturer: syz
[   76.202714][ T4267] usb 4-1: SerialNumber: syz
[   76.225489][ T4267] usb 4-1: config 0 descriptor??
[   76.228967][ T1325] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   76.232813][ T4198] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.252253][ T1325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.268749][ T4198] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.272317][ T1325] usb 2-1: Product: syz
[   76.288160][ T4198] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[   76.294317][ T1325] usb 2-1: Manufacturer: syz
[   76.310265][ T1325] usb 2-1: SerialNumber: syz
[   76.326699][ T1325] usb 2-1: config 0 descriptor??
[   76.337943][ T4198] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[   76.357997][ T4198] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[   76.471910][ T4232] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   76.507262][   T21] usb 4-1: USB disconnect, device number 2
[   76.548985][ T4198] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   76.558250][ T4198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.566292][ T4198] usb 1-1: Product: syz
[   76.574390][ T4198] usb 1-1: Manufacturer: syz
[   76.579547][ T4198] usb 1-1: SerialNumber: syz
[   76.717969][ T4232] usb 3-1: Using ep0 maxpacket: 8
[   76.807219][ T4336] device syzkaller0 entered promiscuous mode
[   76.838158][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.853320][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.863227][ T4232] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   76.876201][ T4232] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[   76.885437][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.893794][ T4198] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[   76.899206][ T4232] usb 3-1: config 0 descriptor??
[   76.912161][ T4198] cdc_ncm 1-1:1.0: bind() failure
[   76.926952][ T4198] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[   76.934280][ T4198] cdc_ncm 1-1:1.1: bind() failure
[   76.958257][ T4198] usb 1-1: USB disconnect, device number 2
[   77.067758][ T4342] device syzkaller0 entered promiscuous mode
[   77.080279][ T4342] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[   77.089436][ T4342] netlink: 44 bytes leftover after parsing attributes in process `syz.3.27'.
[   77.227099][ T4347] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   77.382515][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.406965][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.419180][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.426826][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.438143][ T4267] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   77.446299][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.465315][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.491626][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.511614][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.531106][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.549636][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.556776][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.571142][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.581713][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.592971][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.604106][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.615055][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.625969][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.642408][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.652215][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.663242][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.673582][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.701526][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.725466][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.743882][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.753556][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.766014][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.775796][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.793519][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.806574][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.816304][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.827247][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.837476][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.839227][ T4267] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[   77.856301][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.867340][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.871515][ T4267] usb 5-1: config 0 has no interface number 0
[   77.884197][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.886600][ T4267] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   77.894614][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.916137][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.918140][ T4267] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.924189][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.948473][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.952446][ T4267] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   77.959239][ T4232] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0
[   77.982349][ T4232] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0
[   77.994409][ T4267] usb 5-1: config 0 interface 1 has no altsetting 0
[   78.011727][ T4267] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[   78.031957][ T4267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.088159][ T4267] usb 5-1: config 0 descriptor??
[   78.095505][ T1325] usb 2-1: USB disconnect, device number 2
[   78.288022][ T4232] lenovo 0003:17EF:6047.0001: Fn-lock setting failed: -71
[   78.313662][ T4232] lenovo 0003:17EF:6047.0001: Sensitivity setting failed: -71
[   78.356861][ T4232] usb 3-1: USB disconnect, device number 3
[   78.396761][ T4372] device syzkaller0 entered promiscuous mode
[   78.556713][ T4373] fido_id[4373]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[   78.675323][ T4379] binder: 4378:4379 ioctl 400c620e 200000000040 returned -22
[   78.823724][ T4267] uclogic 0003:145F:0212.0002: pen parameters not found
[   78.834745][ T4267] uclogic 0003:145F:0212.0002: interface is invalid, ignoring
[   78.892187][ T1325] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   79.023686][ T1111] usb 5-1: USB disconnect, device number 2
[   79.148079][ T1325] usb 2-1: Using ep0 maxpacket: 32
[   79.218500][ T4232] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   79.268158][ T1325] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[   79.281956][ T1325] usb 2-1: config 0 has no interface number 0
[   79.291322][ T1325] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[   79.304257][ T1325] usb 2-1: config 0 interface 196 has no altsetting 0
[   79.458020][ T4232] usb 4-1: Using ep0 maxpacket: 8
[   79.468394][ T1325] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[   79.477504][ T1325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.487559][ T1325] usb 2-1: Product: syz
[   79.497155][ T1325] usb 2-1: Manufacturer: syz
[   79.503572][ T1325] usb 2-1: SerialNumber: syz
[   79.519309][ T1325] usb 2-1: config 0 descriptor??
[   79.538391][ T4377] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   79.618319][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short
[   79.698436][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[   79.720654][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   79.736313][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[   79.754782][ T4232] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[   79.765151][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[   79.781985][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[   79.795587][ T4232] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[   79.857543][ T4403] device syzkaller0 entered promiscuous mode
[   79.958317][ T4232] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[   79.967432][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.982336][ T4232] usb 4-1: Product: syz
[   79.986562][ T4232] usb 4-1: Manufacturer: syz
[   79.991621][ T4232] usb 4-1: SerialNumber: syz
[   80.016647][ T4232] usb 4-1: config 0 descriptor??
[   80.048480][ T4386] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   80.067186][ T4267] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.117622][ T4232] snd-usb-audio: probe of 4-1:0.0 failed with error -12
[   80.136847][ T4267] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   80.208003][ T1111] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   80.237202][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   80.287407][ T4235] usb 4-1: USB disconnect, device number 3
[   80.368655][ T4418] device syzkaller0 entered promiscuous mode
[   80.419341][ T1325] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached
[   80.428644][ T4418] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[   80.453663][ T4418] netlink: 44 bytes leftover after parsing attributes in process `syz.4.54'.
[   80.568178][ T1111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.582891][ T1111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.612249][ T1111] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   80.646041][ T1111] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   80.667007][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.691812][ T1111] usb 3-1: config 0 descriptor??
[   80.739776][ T4426] tipc: Started in network mode
[   80.765229][ T4426] tipc: Node identity ac1414aa, cluster identity 4711
[   80.787568][ T4426] tipc: Enabled bearer <udp:s>, priority 10
[   81.170907][ T1111] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd
[   81.188356][ T1111] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[   81.218152][ T4232] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   81.247398][ T1111] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   81.441502][ T1111] usb 3-1: USB disconnect, device number 4
[   81.458148][ T4232] usb 5-1: Using ep0 maxpacket: 16
[   81.484011][ T4450] fido_id[4450]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[   81.618143][ T4232] usb 5-1: unable to get BOS descriptor or descriptor too short
[   81.708289][ T4232] usb 5-1: config 127 has an invalid interface number: 16 but max is 0
[   81.716614][ T4232] usb 5-1: config 127 has no interface number 0
[   81.738750][ T4232] usb 5-1: config 127 interface 16 has no altsetting 0
[   81.825242][ T4198] tipc: Node number set to 2886997162
[   81.908127][ T4232] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=70.8a
[   81.927690][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.940934][ T4232] usb 5-1: Product: syz
[   81.945241][ T4232] usb 5-1: Manufacturer: syz
[   81.977438][ T4232] usb 5-1: SerialNumber: syz
[   82.105192][ T4468] device syzkaller0 entered promiscuous mode
[   82.283384][ T4232] usb_ehset_test: probe of 5-1:127.16 failed with error -32
[   82.312380][ T4232] usb 5-1: USB disconnect, device number 3
[   82.324124][ T4475] device syzkaller0 entered promiscuous mode
[   82.340833][ T4475] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   82.505031][ T4198] usb 2-1: USB disconnect, device number 3
[   82.517981][ T4235] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   82.661842][ T4198] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected
[   82.768170][ T4267] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   82.778045][ T4235] usb 1-1: Using ep0 maxpacket: 16
[   82.789123][   T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   83.058084][ T4235] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[   83.058753][   T23] usb 4-1: Using ep0 maxpacket: 16
[   83.073323][ T4198] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   83.078384][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.105106][ T4235] usb 1-1: Product: syz
[   83.110227][ T4235] usb 1-1: Manufacturer: syz
[   83.117687][ T4235] usb 1-1: SerialNumber: syz
[   83.199882][ T4512] device syzkaller1 entered promiscuous mode
[   83.208113][   T23] usb 4-1: unable to get BOS descriptor or descriptor too short
[   83.216236][ T4267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.230528][ T4267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.241556][ T4267] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[   83.251173][ T4267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.271847][ T4267] usb 3-1: config 0 descriptor??
[   83.298424][   T23] usb 4-1: unable to read config index 0 descriptor/start: -71
[   83.315151][   T23] usb 4-1: can't read configurations, error -71
[   83.498289][ T4198] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   83.514095][ T4198] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   83.621801][ T4198] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   83.637957][ T4198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   83.662839][ T4198] usb 2-1: SerialNumber: syz
[   83.671267][ T4531] device syzkaller0 entered promiscuous mode
[   83.765025][ T4267] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[   83.791295][ T4267] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[   83.828578][ T4267] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[   83.848004][ T4267] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[   83.879274][ T4267] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[   83.930477][ T4267] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0
[   83.971713][ T4198] usb 2-1: 0:2 : does not exist
[   83.987042][ T4198] usb 2-1: unit 5: unexpected type 0x09
[   84.017170][ T4198] usb 2-1: USB disconnect, device number 4
[   84.065142][ T4547] device syzkaller0 entered promiscuous mode
[   84.092960][ T4547] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   84.293315][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   84.508132][ T4267] playstation 0003:054C:0DF2.0005: Invalid gyro calibration data for axis (3), disabling calibration.
[   84.512372][ T4235] snd-usb-audio: probe of 1-1:1.0 failed with error -71
[   84.526032][ T4267] playstation 0003:054C:0DF2.0005: Invalid gyro calibration data for axis (4), disabling calibration.
[   84.557938][ T4267] playstation 0003:054C:0DF2.0005: Invalid gyro calibration data for axis (5), disabling calibration.
[   84.597992][ T4267] playstation 0003:054C:0DF2.0005: Invalid accelerometer calibration data for axis (1), disabling calibration.
[   84.616832][ T4235] usb 1-1: USB disconnect, device number 3
[   84.645461][ T4267] playstation 0003:054C:0DF2.0005: Invalid accelerometer calibration data for axis (2), disabling calibration.
[   84.680139][ T4267] input: HID 054c:0df2 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0005/input/input6
[   84.759192][ T4267] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0005/input/input7
[   84.816339][ T4267] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0005/input/input8
[   84.855946][ T4267] playstation 0003:054C:0DF2.0005: Registered DualSense controller hw_version=0xe8f2453f fw_version=0xa9ff1c9c
[   84.871739][ T4267] usb 3-1: USB disconnect, device number 5
[   84.916823][ T4560] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   84.930008][ T4560] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   85.141200][ T4568] fido_id[4568]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[   85.162675][ T4235] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   85.428682][ T4235] usb 2-1: Using ep0 maxpacket: 16
[   85.439748][ T4578] device syzkaller0 entered promiscuous mode
[   85.559771][ T4235] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.605138][ T4235] usb 2-1: config 0 interface 0 has no altsetting 0
[   85.613449][ T4235] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[   85.633031][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.667982][ T4235] usb 2-1: config 0 descriptor??
[   85.689834][ T4582] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   85.704653][ T4582] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   85.839844][ T1325] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   86.138707][ T1111] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   86.161911][ T4235] hid-generic 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[   86.174200][ T4232] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   86.198197][   T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   86.208316][ T1325] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.219731][ T1325] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   86.308277][ T1325] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   86.317718][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   86.327042][ T1325] usb 5-1: SerialNumber: syz
[   86.378087][ T1111] usb 3-1: Using ep0 maxpacket: 16
[   86.415855][ T4600] udc-core: couldn't find an available UDC or it's busy
[   86.423167][ T4600] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   86.538144][ T4232] usb 1-1: config 8 has an invalid interface number: 223 but max is 0
[   86.546610][ T4232] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[   86.557629][ T4232] usb 1-1: config 8 has no interface number 0
[   86.564328][   T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.576585][ T4232] usb 1-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   86.590247][   T13] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   86.602562][   T13] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   86.616335][ T1325] usb 5-1: 0:2 : does not exist
[   86.626924][ T1325] usb 5-1: USB disconnect, device number 4
[   86.668149][ T1111] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   86.677247][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.686607][ T1111] usb 3-1: Product: syz
[   86.691655][ T1111] usb 3-1: Manufacturer: syz
[   86.695010][ T1108] cfg80211: failed to load regulatory.db
[   86.704061][ T1111] usb 3-1: SerialNumber: syz
[   86.728523][ T1108] usb 2-1: USB disconnect, device number 5
[   86.758489][ T4232] usb 1-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d
[   86.774558][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.784281][   T13] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   86.798058][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.807188][ T4232] usb 1-1: Product: syz
[   86.811728][ T4232] usb 1-1: Manufacturer: syz
[   86.816377][ T4232] usb 1-1: SerialNumber: syz
[   86.821254][   T13] usb 4-1: Product: syz
[   86.825561][   T13] usb 4-1: Manufacturer: syz
[   86.831214][   T13] usb 4-1: SerialNumber: syz
[   86.852659][ T4567] udevd[4567]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   87.108711][ T4232] usb 1-1: USB disconnect, device number 4
[   87.212757][ T4602] capability: warning: `syz.4.95' uses deprecated v2 capabilities in a way that may be insecure
[   87.353034][ T4607] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   87.428322][ T1111] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   87.558034][ T1325] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[   87.638367][ T1111] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   87.649563][ T4609] device syzkaller1 entered promiscuous mode
[   87.702666][ T1111] usb 3-1: USB disconnect, device number 6
[   87.753910][ T4611] device syzkaller0 entered promiscuous mode
[   87.768448][   T13] usb 4-1: 1:1 : invalid UAC_AS_GENERAL desc
[   87.774504][ T4611] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   87.838139][   T13] usb 4-1: 0:2 : does not exist
[   87.875118][   T13] usb 4-1: USB disconnect, device number 6
[   87.928157][ T1325] usb 2-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   87.959719][ T1325] usb 2-1: config 0 interface 0 has no altsetting 0
[   87.966441][ T1325] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[   87.976821][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.992426][ T4616] device syzkaller0 entered promiscuous mode
[   88.002920][ T1325] usb 2-1: config 0 descriptor??
[   88.159845][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[   88.392519][ T4626] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   88.408215][ T4626] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   88.488737][ T1325] hid (null): bogus close delimiter
[   88.497268][ T1325] magicmouse 0003:05AC:0265.0007: bogus close delimiter
[   88.538108][ T1325] magicmouse 0003:05AC:0265.0007: item 0 0 2 10 parsing failed
[   88.538118][ T4234] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   88.564309][ T1325] magicmouse 0003:05AC:0265.0007: magicmouse hid parse failed
[   88.572490][ T1325] magicmouse: probe of 0003:05AC:0265.0007 failed with error -22
[   88.691626][ T1325] usb 2-1: USB disconnect, device number 6
[   88.817866][ T4234] usb 5-1: Using ep0 maxpacket: 32
[   88.915399][ T4645] device syzkaller0 entered promiscuous mode
[   88.958276][ T4234] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[   88.979953][ T4234] usb 5-1: config 0 has no interface number 0
[   88.986162][ T4234] usb 5-1: config 0 interface 184 has no altsetting 0
[   89.198179][ T4234] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   89.218219][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.226820][ T4234] usb 5-1: Product: syz
[   89.249636][ T4234] usb 5-1: Manufacturer: syz
[   89.275007][ T4234] usb 5-1: SerialNumber: syz
[   89.298541][ T4234] usb 5-1: config 0 descriptor??
[   89.355005][ T4234] smsc75xx v1.0.0
[   89.628574][ T1108] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   89.934302][ T1108] usb 2-1: Using ep0 maxpacket: 32
[   90.060249][ T4677] device syzkaller0 entered promiscuous mode
[   90.089513][ T1108] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[   90.102153][ T1108] usb 2-1: config 0 has no interface number 0
[   90.178012][ T1325] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   90.298274][ T1108] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   90.307395][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.339182][ T1108] usb 2-1: Product: syz
[   90.343412][ T1108] usb 2-1: Manufacturer: syz
[   90.356174][ T1108] usb 2-1: SerialNumber: syz
[   90.372176][ T1108] usb 2-1: config 0 descriptor??
[   90.441662][ T1108] smsc95xx v2.0.0
[   90.478168][ T4234] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[   90.548131][ T1325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.559734][ T1325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.569883][ T1325] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   90.579183][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.593449][ T1325] usb 3-1: config 0 descriptor??
[   90.628134][   T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   90.658082][ T1111] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   90.698147][ T4234] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   90.709190][ T4234] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   90.719435][ T4234] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   90.730159][ T4234] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   90.741223][ T4234] smsc75xx: probe of 5-1:0.184 failed with error -71
[   90.753737][ T4234] usb 5-1: USB disconnect, device number 5
[   90.868263][ T1108] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   90.879260][ T1108] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   90.908429][ T1111] usb 4-1: Using ep0 maxpacket: 32
[   90.988204][   T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.000284][   T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.010332][   T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   91.024672][   T13] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   91.033929][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.042291][ T1111] usb 4-1: config 0 has an invalid interface number: 196 but max is 0
[   91.051388][ T1111] usb 4-1: config 0 has no interface number 0
[   91.059651][   T13] usb 1-1: config 0 descriptor??
[   91.065139][ T1111] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[   91.075300][ T1111] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   91.089889][ T1111] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[   91.102373][ T1111] usb 4-1: config 0 interface 196 has no altsetting 0
[   91.268094][ T1111] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[   91.277737][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.292289][ T1325] usb 3-1: string descriptor 0 read error: -22
[   91.307409][ T1111] usb 4-1: Product: syz
[   91.312042][ T1111] usb 4-1: Manufacturer: syz
[   91.316907][ T1111] usb 4-1: SerialNumber: syz
[   91.332818][ T1111] usb 4-1: config 0 descriptor??
[   91.358165][ T4688] raw-gadget.4 gadget: fail, usb_ep_enable returned -22
[   91.543323][   T13] plantronics 0003:047F:FFFF.0009: invalid report_size -527600253
[   91.552117][ T1325] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #100: -71
[   91.561442][ T1325] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71
[   91.568382][ T1108] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32
[   91.576444][   T13] plantronics 0003:047F:FFFF.0009: item 0 4 1 7 parsing failed
[   91.594231][ T1108] smsc95xx: probe of 2-1:0.67 failed with error -32
[   91.594627][ T1325] uclogic 0003:256C:006D.0008: failed probing pen v1 parameters: -71
[   91.611120][   T13] plantronics 0003:047F:FFFF.0009: parse failed
[   91.617430][   T13] plantronics: probe of 0003:047F:FFFF.0009 failed with error -22
[   91.625924][ T1325] uclogic 0003:256C:006D.0008: failed probing parameters: -71
[   91.634398][ T1325] uclogic: probe of 0003:256C:006D.0008 failed with error -71
[   91.683530][ T1325] usb 3-1: USB disconnect, device number 7
[   91.745447][   T13] usb 1-1: USB disconnect, device number 5
[   91.834163][ T1111] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached
[   92.116315][ T4699] =======================================================
[   92.116315][ T4699] WARNING: The mand mount option has been deprecated and
[   92.116315][ T4699]          and is ignored by this kernel. Remove the mand
[   92.116315][ T4699]          option from the mount to silence this warning.
[   92.116315][ T4699] =======================================================
[   92.232337][ T4703] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   92.253251][ T4703] overlayfs: overlapping lowerdir path
[   92.278954][ T4699] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   92.620126][ T1325] usb 2-1: USB disconnect, device number 7
[   92.765063][ T3853] ipheth 4-1:0.196: ipheth_rx_submit: usb_submit_urb: -90
[   92.798124][ T1111] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   92.841289][ T4726] device syzkaller0 entered promiscuous mode
[   92.934065][ T4731] device syzkaller0 entered promiscuous mode
[   92.946719][ T4731] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   93.131640][ T4741] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   93.168383][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   93.179636][ T1111] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[   93.193720][ T1111] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[   93.217763][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.263231][ T1111] usb 1-1: config 0 descriptor??
[   93.302309][ T4716] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   93.422864][ T1325] usb 4-1: USB disconnect, device number 7
[   93.500602][ T1325] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected
[   93.546569][ T4234] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   93.737531][ T4764] device syzkaller0 entered promiscuous mode
[   93.782479][ T1111] logitech 0003:046D:C24F.000A: unknown main item tag 0x0
[   93.800771][ T1111] logitech 0003:046D:C24F.000A: unknown main item tag 0x0
[   93.808368][ T1108] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   93.823258][ T1111] logitech 0003:046D:C24F.000A: unknown main item tag 0x0
[   93.832019][ T1111] logitech 0003:046D:C24F.000A: unknown main item tag 0x0
[   93.843930][ T1111] logitech 0003:046D:C24F.000A: unknown main item tag 0x0
[   93.852532][ T1111] logitech 0003:046D:C24F.000A: unknown main item tag 0x0
[   93.865353][ T1111] logitech 0003:046D:C24F.000A: unknown main item tag 0x0
[   93.874169][ T1111] logitech 0003:046D:C24F.000A: unknown main item tag 0x0
[   93.886606][ T1111] logitech 0003:046D:C24F.000A: unknown main item tag 0x0
[   93.895121][ T1111] logitech 0003:046D:C24F.000A: unknown main item tag 0x0
[   93.906949][ T1111] logitech 0003:046D:C24F.000A: unknown main item tag 0x0
[   93.921641][ T1111] logitech 0003:046D:C24F.000A: unknown main item tag 0x0
[   93.937996][ T1111] logitech 0003:046D:C24F.000A: unknown main item tag 0x0
[   93.956005][ T1111] logitech 0003:046D:C24F.000A: unknown main item tag 0x0
[   93.967937][ T1111] logitech 0003:046D:C24F.000A: unknown main item tag 0x0
[   93.975183][ T1111] logitech 0003:046D:C24F.000A: unknown main item tag 0x0
[   93.986860][ T1111] logitech 0003:046D:C24F.000A: unknown main item tag 0x0
[   93.995064][ T1111] logitech 0003:046D:C24F.000A: unknown main item tag 0x0
[   93.998988][ T4234] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[   94.012113][ T1111] logitech 0003:046D:C24F.000A: unknown main item tag 0x0
[   94.024562][ T4234] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   94.043527][ T1111] logitech 0003:046D:C24F.000A: unknown main item tag 0x0
[   94.051108][ T4234] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   94.067990][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.087958][ T1108] usb 5-1: Using ep0 maxpacket: 32
[   94.094731][ T1111] logitech 0003:046D:C24F.000A: hidraw0: USB HID v0.09 Device [HID 046d:c24f] on usb-dummy_hcd.0-1/input0
[   94.101333][ T4234] usb 3-1: config 0 descriptor??
[   94.118607][ T1111] logitech 0003:046D:C24F.000A: no inputs found
[   94.142247][ T1111] usb 1-1: USB disconnect, device number 6
[   94.181049][ T4234] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   94.254951][ T1108] usb 5-1: config 0 interface 0 altsetting 95 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   94.287880][ T1108] usb 5-1: config 0 interface 0 has no altsetting 0
[   94.294698][ T1108] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[   94.336691][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.360380][ T1108] usb 5-1: config 0 descriptor??
[   94.379650][ T4775] fido_id[4775]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   94.638692][ T4234] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   94.833121][ T4757] udc-core: couldn't find an available UDC or it's busy
[   94.842702][ T4757] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   94.877986][ T1111] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   94.885391][ T1108] belkin 0003:1020:0006.000B: unknown main item tag 0x0
[   94.892949][ T1108] belkin 0003:1020:0006.000B: unknown main item tag 0x1
[   94.900060][ T1108] belkin 0003:1020:0006.000B: unknown main item tag 0x0
[   94.907056][ T1108] belkin 0003:1020:0006.000B: unknown main item tag 0x0
[   94.914385][ T1108] belkin 0003:1020:0006.000B: unknown main item tag 0x0
[   94.921487][ T1108] belkin 0003:1020:0006.000B: unknown main item tag 0x0
[   94.928948][ T1108] belkin 0003:1020:0006.000B: unknown main item tag 0x0
[   94.936482][ T1108] belkin 0003:1020:0006.000B: unknown main item tag 0x0
[   94.943690][ T1108] belkin 0003:1020:0006.000B: unknown main item tag 0x0
[   94.952432][ T1108] belkin 0003:1020:0006.000B: unknown main item tag 0x0
[   94.959522][ T1108] belkin 0003:1020:0006.000B: unknown main item tag 0x0
[   94.966512][ T1108] belkin 0003:1020:0006.000B: unknown main item tag 0x0
[   94.973876][ T1108] belkin 0003:1020:0006.000B: unknown main item tag 0x0
[   94.981071][ T1108] belkin 0003:1020:0006.000B: unknown main item tag 0x0
[   94.988393][ T1108] belkin 0003:1020:0006.000B: unknown main item tag 0x0
[   94.995393][ T1108] belkin 0003:1020:0006.000B: unknown main item tag 0x0
[   95.002521][ T1108] belkin 0003:1020:0006.000B: unknown main item tag 0x2
[   95.009848][ T4234] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.020048][ T1108] belkin 0003:1020:0006.000B: item fetching failed at offset 39/40
[   95.028058][ T4234] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   95.037564][ T1108] belkin 0003:1020:0006.000B: parse failed
[   95.043476][ T1108] belkin: probe of 0003:1020:0006.000B failed with error -22
[   95.084640][   T23] usb 5-1: USB disconnect, device number 6
[   95.108171][ T4234] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   95.117440][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   95.118568][ T1111] usb 1-1: Using ep0 maxpacket: 16
[   95.126712][ T4234] usb 4-1: SerialNumber: syz
[   95.218502][ T1108] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   95.258046][ T1111] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.273033][ T1111] usb 1-1: config 0 interface 0 has no altsetting 0
[   95.280078][ T1111] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[   95.298235][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.318344][ T1111] usb 1-1: config 0 descriptor??
[   95.410889][ T4234] usb 4-1: 0:2 : does not exist
[   95.428813][ T4234] usb 4-1: USB disconnect, device number 8
[   95.488120][ T1108] usb 2-1: Using ep0 maxpacket: 16
[   95.637904][ T1108] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[   95.646051][ T1108] usb 2-1: config 0 has no interface number 0
[   95.658751][ T1108] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[   95.671176][ T1108] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[   95.713464][ T4567] udevd[4567]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   95.800424][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   95.808301][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   95.815516][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   95.823392][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   95.830959][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   95.838604][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   95.845782][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   95.853534][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   95.861113][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   95.869459][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   95.876671][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   95.879228][ T1108] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   95.885163][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   95.894510][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.908736][ T1108] usb 2-1: Product: syz
[   95.913430][ T1108] usb 2-1: Manufacturer: syz
[   95.918502][ T1108] usb 2-1: SerialNumber: syz
[   95.933541][ T1108] usb 2-1: config 0 descriptor??
[   95.939399][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   95.946509][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   95.958219][ T4783] raw-gadget.4 gadget: fail, usb_ep_enable returned -22
[   95.980057][ T4783] raw-gadget.4 gadget: fail, usb_ep_enable returned -22
[   95.987299][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.001390][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.011826][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.024255][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.036741][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.068534][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.084437][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.091667][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.106014][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.116025][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.129974][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.137190][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.150410][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.161627][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.171463][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.186454][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.196624][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.207526][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.219158][ T4783] raw-gadget.4 gadget: fail, usb_ep_enable returned -22
[   96.227530][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.234897][ T4783] raw-gadget.4 gadget: fail, usb_ep_enable returned -22
[   96.248234][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.255478][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.271007][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.280128][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.287318][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.294879][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.302185][ T1111] samsung 0003:0419:0001.000C: unknown main item tag 0x0
[   96.321620][ T1111] samsung 0003:0419:0001.000C: hidraw0: USB HID v0.81 Device [HID 0419:0001] on usb-dummy_hcd.0-1/input0
[   96.343573][ T1111] usb 1-1: USB disconnect, device number 7
[   96.458138][ T1108] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[   96.494304][ T4232] usb 3-1: USB disconnect, device number 8
[   96.519163][ T4797] fido_id[4797]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   96.572392][ T4800] process 'syz.3.161' launched '/dev/fd/3' with NULL argv: empty string added
[   96.746868][ T4806] netlink: 44 bytes leftover after parsing attributes in process `syz.2.160'.
[   96.989891][ T1111] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   97.067916][ T4232] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   97.252618][ T1111] usb 1-1: Using ep0 maxpacket: 16
[   97.308114][ T4232] usb 4-1: Using ep0 maxpacket: 16
[   97.431348][ T4232] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.453154][ T4232] usb 4-1: config 0 interface 0 has no altsetting 0
[   97.475394][ T4232] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[   97.490697][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.517551][ T4232] usb 4-1: config 0 descriptor??
[   97.541132][ T1111] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   97.562435][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.581108][ T1111] usb 1-1: Product: syz
[   97.585339][ T1111] usb 1-1: Manufacturer: syz
[   97.605835][ T1111] usb 1-1: SerialNumber: syz
[   97.622948][ T1111] r8152-cfgselector 1-1: config 0 descriptor??
[   97.888087][ T1111] r8152-cfgselector 1-1: Unknown version 0x0000
[   97.938127][ T1111] r8152-cfgselector 1-1: Unknown version 0x0000
[   97.944599][ T1111] r8152-cfgselector 1-1: bad CDC descriptors
[   98.001818][ T4232] hid-generic 0003:1E71:2009.000D: unknown main item tag 0x0
[   98.017370][ T1111] usbip-host 1-1: 1-1 is not in match_busid table... skip!
[   98.050737][ T4232] hid-generic 0003:1E71:2009.000D: unknown main item tag 0x0
[   98.062955][ T4232] hid-generic 0003:1E71:2009.000D: unknown main item tag 0x0
[   98.075185][ T4232] hid-generic 0003:1E71:2009.000D: unknown main item tag 0x0
[   98.102832][ T4232] hid-generic 0003:1E71:2009.000D: unknown main item tag 0x0
[   98.142695][ T4232] hid-generic 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[   98.174334][ T3069] usb 1-1: config 0 descriptor??
[   98.219334][ T4232] usb 1-1: USB disconnect, device number 8
[   98.327898][    C1] usb 4-1: input irq status -75 received
[   98.518181][ T1108] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[   98.532239][ T4232] usb 4-1: USB disconnect, device number 9
[   98.548311][ T1108] asix: probe of 2-1:0.34 failed with error -32
[   98.928168][ T1111] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   99.299484][ T1111] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.320173][ T1111] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   99.419258][ T1111] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   99.443174][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   99.474208][ T1111] usb 3-1: SerialNumber: syz
[   99.560430][ T4198] usb 2-1: USB disconnect, device number 8
[   99.771816][ T1111] usb 3-1: 0:2 : does not exist
[   99.842947][ T1111] usb 3-1: USB disconnect, device number 9
[  100.089998][ T4567] udevd[4567]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  101.173525][ T4234] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  101.312164][ T4911] fuse: Bad value for 'fd'
[  101.778379][ T4234] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  101.792254][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.821039][ T4234] usb 3-1: Product: syz
[  101.831200][ T4234] usb 3-1: Manufacturer: syz
[  101.835959][ T4234] usb 3-1: SerialNumber: syz
[  102.367177][ T4234] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  102.552169][ T4234] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  102.818383][ T4234] usb 1-1: Using ep0 maxpacket: 32
[  102.936038][ T4964] fuse: Bad value for 'fd'
[  102.971171][ T4234] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[  103.021694][ T4234] usb 1-1: config 0 has no interface number 0
[  103.041909][ T4234] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  103.079373][ T4234] usb 1-1: config 0 interface 196 has no altsetting 0
[  103.253672][ T4234] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  103.267859][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.296412][ T4234] usb 1-1: Product: syz
[  103.347865][ T4234] usb 1-1: Manufacturer: syz
[  103.367896][ T4234] usb 1-1: SerialNumber: syz
[  103.408692][ T4234] usb 1-1: config 0 descriptor??
[  103.448315][ T4942] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  103.903022][ T4234] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached
[  103.979407][ T4234] usb 3-1: USB disconnect, device number 10
[  104.048033][ T4234] usblp0: removed
[  104.331740][ T4983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'.
[  104.353489][ T4983] device bridge_slave_1 left promiscuous mode
[  104.371462][ T4983] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.406752][ T4983] device bridge_slave_0 left promiscuous mode
[  104.427169][ T4983] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.643821][ T1108] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  104.818267][ T1325] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  104.927887][ T1108] usb 3-1: Using ep0 maxpacket: 16
[  105.010545][ T1111] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  105.093565][ T1108] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[  105.102178][ T1108] usb 3-1: config 0 has no interface number 0
[  105.115702][ T1108] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  105.126370][ T1108] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  105.178097][ T1325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.198014][ T1325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.212185][ T1325] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  105.226567][ T1325] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  105.236034][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.255870][ T1325] usb 4-1: config 0 descriptor??
[  105.261197][ T1111] usb 2-1: Using ep0 maxpacket: 16
[  105.348167][ T1108] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  105.362163][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.372456][ T1108] usb 3-1: Product: syz
[  105.377174][ T1108] usb 3-1: Manufacturer: syz
[  105.378620][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.395116][ T1108] usb 3-1: SerialNumber: syz
[  105.404414][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.410371][ T1108] usb 3-1: config 0 descriptor??
[  105.444532][ T1111] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  105.449243][ T4987] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  105.478078][ T4987] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  105.490552][ T1111] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  105.530766][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.555235][ T1111] usb 2-1: config 0 descriptor??
[  105.701031][ T4232] usb 1-1: USB disconnect, device number 9
[  105.713747][ T4987] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  105.755891][ T4987] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  105.757786][ T1325] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  105.782200][ T5047] syz.4.224 uses obsolete (PF_INET,SOCK_PACKET)
[  105.794397][ T1325] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  105.806316][ T1325] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  105.820097][ T1325] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  105.827728][ T1325] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  105.841168][ T1325] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  105.851128][ T1325] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  105.864730][ T1325] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  105.875250][ T1325] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  105.886498][ T1325] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  105.897030][ T1325] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  105.933363][ T1325] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  105.998153][ T1108] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  106.014773][ T5009] udc-core: couldn't find an available UDC or it's busy
[  106.046474][ T1325] usb 4-1: USB disconnect, device number 10
[  106.052600][ T5009] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  106.100215][ T1111] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max
[  106.121067][ T1111] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max
[  106.146574][ T5055] fido_id[5055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  106.164262][ T1111] microsoft 0003:045E:07DA.000F: No inputs registered, leaving
[  106.177155][ T4232] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected
[  106.185832][ T1111] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  106.229747][ T1111] microsoft 0003:045E:07DA.000F: no inputs found
[  106.244126][ T1111] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway
[  106.337960][ T4267] usb 2-1: USB disconnect, device number 9
[  106.478110][ T5067] fido_id[5067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  106.558069][ T4232] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  106.921668][ T4232] usb 1-1: unable to get BOS descriptor or descriptor too short
[  106.987958][ T4232] usb 1-1: unable to read config index 0 descriptor/start: -71
[  107.004778][ T4232] usb 1-1: can't read configurations, error -71
[  108.163742][ T1108] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  108.211240][ T1108] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  108.238751][ T1108] asix: probe of 3-1:0.34 failed with error -71
[  108.284565][ T1108] usb 3-1: USB disconnect, device number 11
[  108.352008][ T5134] syz.0.243[5134] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  108.352085][ T5134] syz.0.243[5134] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  108.516047][ T5142] netlink: 60 bytes leftover after parsing attributes in process `syz.0.246'.
[  108.545106][ T5142] netlink: 60 bytes leftover after parsing attributes in process `syz.0.246'.
[  108.572858][ T5140] tipc: Started in network mode
[  108.577764][ T5140] tipc: Node identity d269959824fd, cluster identity 4711
[  108.595884][ T5140] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.606589][ T5143] netlink: 60 bytes leftover after parsing attributes in process `syz.0.246'.
[  108.617946][ T4234] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  108.659435][ T5140] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  108.701729][ T5145] tipc: Resetting bearer <eth:syzkaller0>
[  108.806974][ T5139] tipc: Disabling bearer <eth:syzkaller0>
[  109.028113][ T4234] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  109.047968][ T4234] usb 4-1: config 0 has no interface number 0
[  109.064874][ T4234] usb 4-1: config 0 interface 41 has no altsetting 0
[  109.195946][ T5155] netlink: 'syz.1.250': attribute type 29 has an invalid length.
[  109.239663][ T5155] netlink: 'syz.1.250': attribute type 29 has an invalid length.
[  109.264800][ T5158] netlink: 'syz.1.250': attribute type 29 has an invalid length.
[  109.276438][ T5155] netlink: 'syz.1.250': attribute type 29 has an invalid length.
[  109.298773][ T4234] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  109.314621][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.343394][ T5160] device wlan0 entered promiscuous mode
[  109.350032][ T4234] usb 4-1: Product: syz
[  109.361988][ T4234] usb 4-1: Manufacturer: syz
[  109.381096][ T4234] usb 4-1: SerialNumber: syz
[  109.419154][ T4234] usb 4-1: config 0 descriptor??
[  109.450015][ T5163] netlink: 'syz.2.254': attribute type 10 has an invalid length.
[  109.508323][ T5163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.254'.
[  109.546078][ T5163] batman_adv: batadv0: Adding interface: vlan1
[  109.566722][ T5163] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.602686][ T5167] netlink: 194980 bytes leftover after parsing attributes in process `syz.0.255'.
[  109.664965][ T5163] batman_adv: batadv0: Interface activated: vlan1
[  109.818940][ T5169] VFS: Mount too revealing
[  110.102851][ T1325] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  110.338068][ T4234] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  110.367893][ T1325] usb 3-1: Using ep0 maxpacket: 32
[  110.488351][ T1325] usb 3-1: config 0 has an invalid interface number: 49 but max is 0
[  110.503220][ T1325] usb 3-1: config 0 has no interface number 0
[  110.540436][ T1325] usb 3-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30
[  110.582471][ T1325] usb 3-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52
[  110.633294][ T1325] usb 3-1: config 0 interface 49 has no altsetting 0
[  110.657951][ T1325] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  110.674074][ T4234] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  110.687683][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.710672][ T4234] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[  110.726962][ T1325] usb 3-1: config 0 descriptor??
[  111.049726][ T4234] CoreChips: probe of 4-1:0.41 failed with error -71
[  111.060675][ T4234] usb 4-1: USB disconnect, device number 11
[  111.088140][ T1325] usb 3-1: string descriptor 0 read error: -71
[  111.134257][ T1325] usb 3-1: USB disconnect, device number 12
[  111.369227][ T5192] netlink: 'syz.0.263': attribute type 25 has an invalid length.
[  111.432016][ T5192] netlink: 'syz.0.263': attribute type 29 has an invalid length.
[  111.712962][ T5198] comedi comedi0: Minor 3 could not be opened
[  112.318350][ T4234] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  112.598099][ T4234] usb 1-1: Using ep0 maxpacket: 32
[  112.748236][ T4234] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  112.778222][ T4234] usb 1-1: config 0 has no interface number 0
[  112.784381][ T4234] usb 1-1: config 0 interface 184 has no altsetting 0
[  113.028101][ T4234] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  113.037429][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.067400][ T4234] usb 1-1: Product: syz
[  113.085304][ T4234] usb 1-1: Manufacturer: syz
[  113.096293][ T4234] usb 1-1: SerialNumber: syz
[  113.122386][ T4234] usb 1-1: config 0 descriptor??
[  113.159011][ T4234] smsc75xx v1.0.0
[  113.397945][ T1108] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  113.468068][   T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  114.214342][ T5237] device macsec1 entered promiscuous mode
[  114.244745][ T5237] device virt_wifi0 entered promiscuous mode
[  114.258240][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  114.268135][ T1108] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  114.287938][ T1108] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  114.318092][   T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.336536][   T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  114.364446][ T5237] input: syz0 as /devices/virtual/input/input9
[  114.468887][   T23] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  114.488063][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  114.506480][   T23] usb 2-1: SerialNumber: syz
[  114.512046][ T1108] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  114.543093][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  114.571996][ T1108] usb 4-1: Product: syz
[  114.576438][ T1108] usb 4-1: Manufacturer: syz
[  114.592286][ T1108] usb 4-1: SerialNumber: syz
[  114.607998][ T4234] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  114.627957][ T4234] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  114.668350][ T4234] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  114.687911][ T4234] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  114.708263][ T4234] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  114.725143][ T4234] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  114.735182][ T4234] smsc75xx: probe of 1-1:0.184 failed with error -71
[  114.755407][ T4234] usb 1-1: USB disconnect, device number 12
[  114.820908][   T23] usb 2-1: 0:2 : does not exist
[  114.844963][   T23] usb 2-1: USB disconnect, device number 10
[  114.873838][ T1108] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  114.947964][ T4267] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  115.083066][ T1325] usb 4-1: USB disconnect, device number 12
[  115.145812][ T4567] udevd[4567]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  115.218830][ T4267] usb 3-1: Using ep0 maxpacket: 16
[  115.295509][ T5213] usblp0: removed
[  115.501582][ T4267] usb 3-1: unable to get BOS descriptor or descriptor too short
[  115.546089][  T150] block nbd0: Attempted send on invalid socket
[  115.554480][  T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  116.297874][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  116.317856][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  116.327853][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  116.337870][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  116.347856][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  116.357854][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  116.368057][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  116.377875][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  116.387857][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  116.397850][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  116.533309][ T5259] SQUASHFS error: Failed to read block 0x0: -5
[  116.548311][ T5259] unable to read squashfs_super_block
[  116.588301][ T4267] usb 3-1: config 131 has an invalid interface number: 89 but max is 0
[  116.614269][ T4267] usb 3-1: config 131 has no interface number 0
[  116.677908][ T4267] usb 3-1: config 131 interface 89 altsetting 177 has an invalid endpoint with address 0x80, skipping
[  116.697947][ T4267] usb 3-1: config 131 interface 89 altsetting 177 has an invalid endpoint with address 0x0, skipping
[  116.746373][ T4267] usb 3-1: config 131 interface 89 altsetting 177 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  116.788314][ T4267] usb 3-1: config 131 interface 89 altsetting 177 bulk endpoint 0xA has invalid maxpacket 1023
[  116.830264][ T4267] usb 3-1: config 131 interface 89 altsetting 177 has an invalid endpoint with address 0x80, skipping
[  116.893174][ T4267] usb 3-1: config 131 interface 89 altsetting 177 has an invalid endpoint with address 0x80, skipping
[  116.925365][ T4267] usb 3-1: config 131 interface 89 altsetting 177 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  116.988406][ T4267] usb 3-1: config 131 interface 89 altsetting 177 endpoint 0xB has an invalid bInterval 79, changing to 7
[  117.018046][ T4267] usb 3-1: config 131 interface 89 altsetting 177 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  117.048239][ T4267] usb 3-1: config 131 interface 89 altsetting 177 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  117.090570][ T4267] usb 3-1: config 131 interface 89 altsetting 177 bulk endpoint 0xE has invalid maxpacket 64
[  117.118129][ T4267] usb 3-1: config 131 interface 89 has no altsetting 0
[  117.226075][ T5271] xt_hashlimit: size too large, truncated to 1048576
[  117.479510][ T4267] usb 3-1: New USB device found, idVendor=10b8, idProduct=1e78, bcdDevice=70.a5
[  117.785833][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.814250][ T4267] usb 3-1: Product: syz
[  117.821297][ T4267] usb 3-1: Manufacturer: syz
[  117.833938][ T4267] usb 3-1: SerialNumber: syz
[  117.928273][ T4267] usb 3-1: can't set config #131, error -71
[  118.021868][   T26] audit: type=1107 audit(1784187067.726:2): pid=5276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1���[��Po�
[  118.021868][   T26] �/v,��L�9���2���MeX�7xW�Ϩ���	fXKSRU�r�j�[j�ט���\�ȩ�(,����%�����9�0��.:� �����sϨ��-I�
!>g&�"��/���\Y=L3�{!҃�2�Ԧpj���>�;���ۺ�/��ٴ����ف�]�a���'v-���<�$��%�Q���5���l���eFr�=���/�a���#
[  118.021868][   T26] ���h��0�V��Z�2�'
[  119.526874][ T4267] usb 3-1: USB disconnect, device number 13
[  119.877558][ T5283] syz.0.293 sent an empty control message without MSG_MORE.
[  119.979752][ T4267] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  120.498059][ T4267] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.527367][ T4267] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  120.577415][ T4267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.779985][ T4267] usb 3-1: config 0 descriptor??
[  120.939871][ T4267] pwc: Askey VC010 type 2 USB webcam detected.
[  121.718166][ T4267] pwc: send_video_command error -71
[  121.723446][ T4267] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  121.764278][ T4267] Philips webcam: probe of 3-1:0.0 failed with error -71
[  121.798360][ T4267] usb 3-1: USB disconnect, device number 14
[  122.358148][ T4267] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  123.998055][ T4267] usb 3-1: Using ep0 maxpacket: 32
[  124.238062][ T4267] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  124.308119][ T4267] usb 3-1: config 0 has no interface number 0
[  124.478260][ T4267] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  124.539518][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.588494][ T4267] usb 3-1: Product: syz
[  124.598656][ T4267] usb 3-1: Manufacturer: syz
[  124.613907][ T4267] usb 3-1: SerialNumber: syz
[  124.645989][ T4267] usb 3-1: config 0 descriptor??
[  124.743938][ T4267] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  124.821837][ T4267] usb 3-1: qt2_attach - failed to power on unit: -71
[  124.860623][ T4267] quatech2: probe of 3-1:0.51 failed with error -71
[  124.906748][ T4267] usb 3-1: USB disconnect, device number 15
[  126.179548][ T1111] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  126.193473][ T1111] Bluetooth: hci2: Injecting HCI hardware error event
[  126.229500][ T4204] Bluetooth: hci2: hardware error 0x00
[  126.308356][ T5336] mmap: syz.4.308 (5336) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  126.332593][ T5339] device syzkaller0 entered promiscuous mode
[  127.697823][    C0] sched: RT throttling activated
[  127.898837][ T5344] netlink: 72 bytes leftover after parsing attributes in process `syz.4.308'.
[  127.961245][ T5348] netlink: 'syz.3.312': attribute type 2 has an invalid length.
[  127.977956][ T5348] netlink: 'syz.3.312': attribute type 1 has an invalid length.
[  127.991566][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'.
[  130.665297][ T5349] team0: Port device team_slave_0 removed
[  133.844940][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  133.851319][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  135.339040][ T5380] netlink: 'syz.3.319': attribute type 12 has an invalid length.
[  136.092633][ T5389] device syzkaller0 entered promiscuous mode
[  137.096197][ T5409] gfs2: not a GFS2 filesystem
[  137.117931][   T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  137.137733][ T5409] Zero length message leads to an empty skb
[  138.088460][ T5407] ipt_rpfilter: unknown options
[  138.938100][   T23] usb 2-1: unable to get BOS descriptor or descriptor too short
[  138.957971][   T23] usb 2-1: no configurations
[  139.018774][   T23] usb 2-1: can't read configurations, error -22
[  139.687964][ T1108] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  139.804043][ T5427] device syzkaller0 entered promiscuous mode
[  139.938006][ T1108] usb 1-1: Using ep0 maxpacket: 32
[  140.058171][ T1108] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  140.071527][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.138018][ T1108] usb 1-1: config 0 has no interface number 0
[  140.319016][ T1108] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  140.347406][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.408010][ T1108] usb 1-1: Product: syz
[  140.421777][ T1108] usb 1-1: Manufacturer: syz
[  140.441099][ T1108] usb 1-1: SerialNumber: syz
[  140.472266][ T1108] usb 1-1: config 0 descriptor??
[  140.510967][ T5439] ALSA: mixer_oss: invalid OSS volume '00E0'
[  140.534023][ T1108] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  140.555609][ T1108] cx231xx 1-1:0.1: Not found matching IAD interface
[  140.572821][ T5439] ALSA: mixer_oss: invalid OSS volume '17'
[  140.593830][ T5439] ALSA: mixer_oss: invalid OSS volume '01'
[  140.764659][ T1108] usb 1-1: USB disconnect, device number 13
[  140.993741][ T5432] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  141.015801][ T5432] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  141.039162][ T5443] netlink: 'syz.4.343': attribute type 11 has an invalid length.
[  141.218227][ T4232] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  141.251132][ T5447] block nbd3: NBD_DISCONNECT
[  141.557927][ T4232] usb 3-1: Using ep0 maxpacket: 8
[  142.787062][ T4204] block nbd3: Disconnected due to user request.
[  143.318109][ T4232] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  143.346093][ T4232] usb 3-1: config 179 has no interface number 0
[  143.362199][ T4232] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  143.394235][ T4232] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  143.447642][ T4232] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  143.500702][ T4232] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  143.563286][ T4232] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  143.632795][ T4232] usb 3-1: config 179 interface 65 has no altsetting 0
[  143.668119][ T4232] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  143.714840][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.792080][ T4232] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input10
[  143.922677][ T4232] usb 3-1: USB disconnect, device number 16
[  143.928876][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  143.985018][ T4232] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  144.017979][ T1325] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  144.408753][ T1325] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  144.451413][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.482500][ T1325] usb 1-1: config 0 descriptor??
[  144.519875][ T1325] gspca_main: cpia1-2.14.0 probing 0813:0001
[  144.825010][ T5487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.356'.
[  146.178473][ T1325] gspca_cpia1: usb_control_msg 03, error -110
[  146.209794][ T1325] gspca_cpia1: usb_control_msg 01, error -32
[  146.231278][ T5496] binder_alloc: 5494: binder_alloc_buf, no vma
[  146.247985][ T1325] gspca_cpia1: usb_control_msg 01, error -32
[  146.277996][ T1325] gspca_cpia1: usb_control_msg 01, error -32
[  146.297982][ T1325] gspca_cpia1: usb_control_msg 01, error -32
[  146.304033][ T1325] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0)
[  147.620362][ T4265] usb 1-1: USB disconnect, device number 14
[  148.977938][ T1325] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  149.167949][   T23] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  149.238059][ T1325] usb 4-1: Using ep0 maxpacket: 16
[  149.370409][ T1325] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  149.393746][ T1325] usb 4-1: config 0 has no interface number 0
[  149.568253][ T1325] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  149.578056][   T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  149.588578][   T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  149.607045][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.620897][ T1325] usb 4-1: Product: syz
[  149.625129][ T1325] usb 4-1: Manufacturer: syz
[  149.652374][ T1325] usb 4-1: SerialNumber: syz
[  149.665249][ T1325] usb 4-1: config 0 descriptor??
[  149.688141][   T23] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  149.697279][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  149.708683][ T1325] hub 4-1:0.132: bad descriptor, ignoring hub
[  149.712953][   T23] usb 2-1: SerialNumber: syz
[  149.723237][ T1325] hub: probe of 4-1:0.132 failed with error -5
[  150.133303][   T23] usb 2-1: 0:2 : does not exist
[  152.227120][   T23] usb 2-1: USB disconnect, device number 13
[  152.326236][ T5546] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  152.523576][ T1108] usb 4-1: USB disconnect, device number 13
[  152.940422][ T5526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  153.391028][ T4567] udevd[4567]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  153.540969][ T5546] block device autoloading is deprecated and will be removed.
[  154.089013][   T23] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  154.589517][ T5575] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.948138][   T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.090145][ T5584] bridge0: port 3(syz_tun) entered blocking state
[  155.096863][ T5584] bridge0: port 3(syz_tun) entered disabled state
[  155.112578][ T5584] device syz_tun entered promiscuous mode
[  155.120972][ T5584] bridge0: port 3(syz_tun) entered blocking state
[  155.127464][ T5584] bridge0: port 3(syz_tun) entered forwarding state
[  155.173787][   T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  156.987980][   T23] usb 3-1: string descriptor 0 read error: -71
[  156.994514][   T23] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  157.062635][ T5589] device syzkaller0 entered promiscuous mode
[  157.078083][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  157.268150][   T23] usb 3-1: can't set config #1, error -71
[  157.283425][   T23] usb 3-1: USB disconnect, device number 17
[  158.289171][ T5595] lo speed is unknown, defaulting to 1000
[  158.295296][ T5595] lo speed is unknown, defaulting to 1000
[  158.303851][ T5595] lo speed is unknown, defaulting to 1000
[  158.314318][ T5595] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  158.326846][ T5595] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  158.362651][ T5595] lo speed is unknown, defaulting to 1000
[  158.369803][ T5595] lo speed is unknown, defaulting to 1000
[  158.376582][ T5595] lo speed is unknown, defaulting to 1000
[  158.384637][ T5595] lo speed is unknown, defaulting to 1000
[  158.391039][ T5595] lo speed is unknown, defaulting to 1000
[  158.593961][ T5560] ODEBUG: Out of memory. ODEBUG disabled
[  158.649425][ T5607] fuse: Bad value for 'fd'
[  158.797988][ T1325] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  159.048494][ T1325] usb 1-1: Using ep0 maxpacket: 32
[  159.217890][ T1325] usb 1-1: unable to get BOS descriptor or descriptor too short
[  159.299825][ T1325] usb 1-1: config 14 has an invalid interface number: 57 but max is 1
[  159.316155][ T1325] usb 1-1: config 14 has an invalid interface number: 228 but max is 1
[  159.352676][ T1325] usb 1-1: config 14 has no interface number 0
[  159.367646][ T1325] usb 1-1: config 14 has no interface number 1
[  159.388650][ T1325] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  159.408980][ T1325] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  159.424424][ T1325] usb 1-1: config 14 interface 57 has no altsetting 0
[  159.434336][ T1325] usb 1-1: config 14 interface 228 has no altsetting 0
[  159.599120][ T1325] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  159.608388][   T13] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  159.636444][ T1325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.647872][ T4198] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  159.662499][ T1325] usb 1-1: Product: syz
[  159.671958][ T1325] usb 1-1: Manufacturer: syz
[  159.676644][ T1325] usb 1-1: SerialNumber: syz
[  160.018555][   T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.038770][ T4198] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.075034][ T4198] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  160.080479][   T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  160.258359][ T4198] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  160.267848][ T4198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  160.276604][ T4198] usb 4-1: SerialNumber: syz
[  160.299140][   T13] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  160.473376][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  160.556932][   T13] usb 2-1: SerialNumber: syz
[  160.810258][ T4198] usb 4-1: 0:2 : does not exist
[  160.868005][ T4198] usb 4-1: USB disconnect, device number 14
[  160.920548][   T13] usb 2-1: 0:2 : does not exist
[  160.988920][   T13] usb 2-1: USB disconnect, device number 14
[  161.039969][ T1325] legousbtower 1-1:14.57: interrupt endpoints not found
[  161.089224][ T1325] legousbtower 1-1:14.228: interrupt endpoints not found
[  161.099300][ T4567] udevd[4567]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  161.123615][ T1325] usb 1-1: USB disconnect, device number 15
[  161.156995][ T5643] tc action pedit offset 132 out of bounds
[  161.209115][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  161.589968][ T5658] bridge0: port 3(syz_tun) entered blocking state
[  161.638198][ T5658] bridge0: port 3(syz_tun) entered disabled state
[  161.663475][ T5658] device syz_tun entered promiscuous mode
[  161.724896][ T5658] bridge0: port 3(syz_tun) entered blocking state
[  161.731475][ T5658] bridge0: port 3(syz_tun) entered forwarding state
[  163.307762][ T5684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.417'.
[  163.973683][ T5700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'.
[  164.152684][ T5700] syz.1.421 (5700) used greatest stack depth: 19920 bytes left
[  164.405227][ T5707] device syzkaller0 entered promiscuous mode
[  164.417720][ T5704] fuse: root generation should be zero
[  164.458029][ T4198] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  164.589622][ T5712] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.618310][ T5712] device syzkaller0 entered promiscuous mode
[  164.645904][ T5712] tipc: Resetting bearer <eth:syzkaller0>
[  164.684214][ T5711] tipc: Resetting bearer <eth:syzkaller0>
[  164.708821][ T5711] tipc: Disabling bearer <eth:syzkaller0>
[  164.722959][ T5716] bridge0: port 3(syz_tun) entered blocking state
[  164.729652][ T4198] usb 1-1: Using ep0 maxpacket: 32
[  164.739867][ T5716] bridge0: port 3(syz_tun) entered disabled state
[  164.747433][ T5716] device syz_tun entered promiscuous mode
[  164.764008][ T5716] bridge0: port 3(syz_tun) entered blocking state
[  164.770537][ T5716] bridge0: port 3(syz_tun) entered forwarding state
[  164.873384][ T4198] usb 1-1: unable to get BOS descriptor or descriptor too short
[  164.941697][ T4198] usb 1-1: unable to read config index 0 descriptor/start: -71
[  164.949848][ T4198] usb 1-1: can't read configurations, error -71
[  165.158041][ T1325] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  165.267933][   T13] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  165.397888][ T1325] usb 2-1: Using ep0 maxpacket: 16
[  165.569016][ T1325] usb 2-1: unable to get BOS descriptor or descriptor too short
[  165.798050][ T1325] usb 2-1: config 5 has an invalid interface number: 8 but max is 0
[  165.816334][ T1325] usb 2-1: config 5 has no interface number 0
[  165.868763][ T4198] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  165.888147][   T13] usb 3-1: unable to get BOS descriptor or descriptor too short
[  165.897970][ T1325] usb 2-1: config 5 interface 8 has no altsetting 0
[  166.008006][   T13] usb 3-1: unable to read config index 0 descriptor/start: -71
[  166.019276][   T13] usb 3-1: can't read configurations, error -71
[  166.067987][ T1325] usb 2-1: New USB device found, idVendor=688d, idProduct=88d0, bcdDevice=84.05
[  166.077119][ T1325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.097874][ T1325] usb 2-1: Product: syz
[  166.102083][ T1325] usb 2-1: Manufacturer: syz
[  166.106683][ T1325] usb 2-1: SerialNumber: syz
[  166.278288][ T4198] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  166.296137][ T4198] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  166.325354][ T4198] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  166.346517][ T4198] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  166.438734][ T1325] usb-storage 2-1:5.8: USB Mass Storage device detected
[  166.518247][ T4198] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  166.527399][ T4198] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  166.556747][ T4198] usb 1-1: Product: syz
[  166.561462][ T4198] usb 1-1: Manufacturer: syz
[  166.569062][ T1325] usb 2-1: USB disconnect, device number 15
[  166.610657][ T5727] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  166.628943][ T4198] cdc_wdm 1-1:1.0: skipping garbage
[  166.636490][ T4198] cdc_wdm 1-1:1.0: skipping garbage
[  166.664740][ T4198] cdc_wdm: probe of 1-1:1.0 failed with error -22
[  166.820499][ T5758] tipc: Started in network mode
[  166.825559][ T5758] tipc: Node identity 1aba133850ef, cluster identity 4711
[  166.891857][ T5758] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.900550][ T1325] usb 1-1: USB disconnect, device number 17
[  166.982302][ T5758] device syzkaller0 entered promiscuous mode
[  167.056857][ T5758] tipc: Resetting bearer <eth:syzkaller0>
[  167.072157][ T5757] tipc: Resetting bearer <eth:syzkaller0>
[  167.388014][ T5757] tipc: Disabling bearer <eth:syzkaller0>
[  169.698783][ T5792] device syzkaller0 entered promiscuous mode
[  169.803777][ T5799] netlink: 48 bytes leftover after parsing attributes in process `syz.1.448'.
[  170.439453][ T5788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  172.661058][ T5813] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  172.685076][ T5814] loop5: detected capacity change from 0 to 7
[  172.705635][ T4567] Dev loop5: unable to read RDB block 7
[  172.731585][ T4567]  loop5: AHDI p1
[  172.735861][ T4567] loop5: partition table partially beyond EOD, truncated
[  172.798630][ T5814] Dev loop5: unable to read RDB block 7
[  172.804402][ T5814]  loop5: AHDI p1
[  172.828932][ T5814] loop5: partition table partially beyond EOD, truncated
[  175.052637][ T5844] fuseblk: Bad value for 'fd'
[  175.089741][ T5831] Process accounting resumed
[  177.437993][   T13] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  177.502764][ T5863] tipc: Started in network mode
[  177.507739][ T5863] tipc: Node identity c6c9735f8028, cluster identity 4711
[  177.515782][ T5863] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.550742][ T5863] device syzkaller0 entered promiscuous mode
[  177.623072][ T5863] tipc: Resetting bearer <eth:syzkaller0>
[  177.640968][ T5862] tipc: Resetting bearer <eth:syzkaller0>
[  177.675714][ T5862] tipc: Disabling bearer <eth:syzkaller0>
[  177.848139][   T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  177.878061][   T13] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  177.917178][   T13] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  177.952561][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.990262][   T13] usb 2-1: config 0 descriptor??
[  178.035584][   T13] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  178.058108][   T13] dvb-usb: bulk message failed: -22 (3/0)
[  178.094122][   T13] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  178.128321][   T13] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  178.146941][   T13] usb 2-1: media controller created
[  178.155147][   T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  178.177494][   T13] dvb-usb: bulk message failed: -22 (6/0)
[  178.224599][   T13] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  178.319737][   T13] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11
[  179.042913][ T4267] libceph: connect (1)[c::]:6789 error -101
[  179.073563][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  179.086397][ T4267] libceph: mon0 (1)[c::]:6789 connect error
[  179.125277][ T5890] ceph: No mds server is up or the cluster is laggy
[  179.163833][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  179.254676][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  179.512665][   T13] dvb-usb: schedule remote query interval to 150 msecs.
[  179.519760][   T13] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  180.086948][   T13] dvb-usb: bulk message failed: -22 (1/0)
[  180.093052][   T13] dvb-usb: error while querying for an remote control event.
[  180.102215][   T13] usb 2-1: USB disconnect, device number 16
[  180.137143][ T4204] Bluetooth: hci3: Unknown advertising packet type: 0x100
[  180.137332][ T4204] ==================================================================
[  180.153012][ T4204] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12ea/0x3ca0
[  180.160861][ T4204] Read of size 1 at addr ffff888077592c05 by task kworker/u5:7/4204
[  180.168878][ T4204] 
[  180.171210][ T4204] CPU: 0 PID: 4204 Comm: kworker/u5:7 Not tainted syzkaller #0
[  180.178756][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  180.188850][ T4204] Workqueue: hci3 hci_rx_work
[  180.193604][ T4204] Call Trace:
[  180.196910][ T4204]  <TASK>
[  180.199844][ T4204]  dump_stack_lvl+0x188/0x250
[  180.204536][ T4204]  ? show_regs_print_info+0x20/0x20
[  180.209747][ T4204]  ? load_image+0x410/0x410
[  180.214256][ T4204]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  180.219888][ T4204]  print_address_description+0x60/0x2d0
[  180.225476][ T4204]  ? hci_le_meta_evt+0x12ea/0x3ca0
[  180.230603][ T4204]  kasan_report+0xdf/0x130
[  180.235152][ T4204]  ? hci_le_meta_evt+0x12ea/0x3ca0
[  180.240342][ T4204]  hci_le_meta_evt+0x12ea/0x3ca0
[  180.245331][ T4204]  ? hci_event_packet+0x363/0x1310
[  180.250477][ T4204]  ? __lock_acquire+0x7b50/0x7b50
[  180.255521][ T4204]  ? hci_remote_host_features_evt+0x240/0x240
[  180.261602][ T4204]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  180.267247][ T4204]  ? mark_lock+0x94/0x320
[  180.271593][ T4204]  ? mutex_unlock+0x10/0x10
[  180.276124][ T4204]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  180.282125][ T4204]  ? lock_chain_count+0x20/0x20
[  180.287003][ T4204]  ? __rwlock_init+0x140/0x140
[  180.291774][ T4204]  hci_event_packet+0xe0b/0x1310
[  180.296751][ T4204]  ? _raw_spin_unlock+0x40/0x40
[  180.301627][ T4204]  ? rcu_lock_release+0x20/0x20
[  180.306490][ T4204]  ? hci_send_to_monitor+0x9c/0x4a0
[  180.311698][ T4204]  hci_rx_work+0x255/0xa10
[  180.316127][ T4204]  process_one_work+0x867/0xff0
[  180.320990][ T4204]  ? worker_detach_from_pool+0x240/0x240
[  180.326621][ T4204]  ? lockdep_hardirqs_off+0x70/0x100
[  180.331915][ T4204]  ? _raw_spin_lock_irq+0xb7/0xf0
[  180.336982][ T4204]  ? _raw_spin_lock_irqsave+0x100/0x100
[  180.342654][ T4204]  ? wq_worker_running+0x97/0x170
[  180.347694][ T4204]  worker_thread+0xad7/0x12a0
[  180.352417][ T4204]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  180.358331][ T4204]  kthread+0x42e/0x520
[  180.362429][ T4204]  ? rcu_lock_release+0x20/0x20
[  180.367291][ T4204]  ? kthread_blkcg+0xd0/0xd0
[  180.371891][ T4204]  ret_from_fork+0x1f/0x30
[  180.376323][ T4204]  </TASK>
[  180.379345][ T4204] 
[  180.381662][ T4204] Allocated by task 5902:
[  180.385987][ T4204]  __kasan_kmalloc+0xaf/0xe0
[  180.390585][ T4204]  __alloc_skb+0x22c/0x750
[  180.395008][ T4204]  vhci_write+0xbd/0x440
[  180.399273][ T4204]  vfs_write+0x748/0xd70
[  180.403547][ T4204]  ksys_write+0x153/0x260
[  180.407909][ T4204]  do_syscall_64+0x4c/0xa0
[  180.412331][ T4204]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  180.418248][ T4204] 
[  180.420573][ T4204] The buggy address belongs to the object at ffff888077592800
[  180.420573][ T4204]  which belongs to the cache kmalloc-1k of size 1024
[  180.434815][ T4204] The buggy address is located 5 bytes to the right of
[  180.434815][ T4204]  1024-byte region [ffff888077592800, ffff888077592c00)
[  180.448546][ T4204] The buggy address belongs to the page:
[  180.454210][ T4204] page:ffffea0001dd6400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77590
[  180.464367][ T4204] head:ffffea0001dd6400 order:3 compound_mapcount:0 compound_pincount:0
[  180.472726][ T4204] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  180.480752][ T4204] raw: 00fff00000010200 0000000000000000 0000000900000001 ffff888016c41dc0
[  180.489343][ T4204] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  180.497927][ T4204] page dumped because: kasan: bad access detected
[  180.504373][ T4204] page_owner tracks the page as allocated
[  180.510085][ T4204] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4175, ts 66036759534, free_ts 66036479591
[  180.528576][ T4204]  get_page_from_freelist+0x24f6/0x2670
[  180.534165][ T4204]  __alloc_pages+0x1ee/0x480
[  180.538763][ T4204]  new_slab+0xc0/0x4b0
[  180.542844][ T4204]  ___slab_alloc+0x807/0xdd0
[  180.547460][ T4204]  __kmalloc_node_track_caller+0x13d/0x3a0
[  180.553274][ T4204]  __alloc_skb+0x22c/0x750
[  180.557715][ T4204]  __tcp_send_ack+0x9d/0x5d0
[  180.562341][ T4204]  tcp_recvmsg_locked+0x1e1c/0x2690
[  180.567550][ T4204]  tcp_recvmsg+0x22a/0x760
[  180.571976][ T4204]  inet_recvmsg+0x146/0x200
[  180.576479][ T4204]  sock_read_iter+0x2c2/0x380
[  180.581154][ T4204]  vfs_read+0x75e/0xd50
[  180.585308][ T4204]  ksys_read+0x153/0x260
[  180.589576][ T4204]  do_syscall_64+0x4c/0xa0
[  180.593995][ T4204]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  180.599899][ T4204] page last free stack trace:
[  180.604568][ T4204]  free_unref_page_prepare+0x637/0x6c0
[  180.610045][ T4204]  free_unref_page+0x8f/0x2a0
[  180.614725][ T4204]  skb_release_data+0x35c/0x830
[  180.619579][ T4204]  __kfree_skb+0x4c/0x60
[  180.623826][ T4204]  tcp_recvmsg_locked+0x143d/0x2690
[  180.629043][ T4204]  tcp_recvmsg+0x22a/0x760
[  180.633462][ T4204]  inet_recvmsg+0x146/0x200
[  180.637976][ T4204]  sock_read_iter+0x2c2/0x380
[  180.642671][ T4204]  vfs_read+0x75e/0xd50
[  180.646833][ T4204]  ksys_read+0x153/0x260
[  180.651102][ T4204]  do_syscall_64+0x4c/0xa0
[  180.655536][ T4204]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  180.661459][ T4204] 
[  180.663783][ T4204] Memory state around the buggy address:
[  180.669409][ T4204]  ffff888077592b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  180.677474][ T4204]  ffff888077592b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  180.685537][ T4204] >ffff888077592c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  180.693601][ T4204]                    ^
[  180.697669][ T4204]  ffff888077592c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  180.705738][ T4204]  ffff888077592d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  180.713816][ T4204] ==================================================================
[  180.721966][ T4204] Disabling lock debugging due to kernel taint
[  180.734413][ T4204] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  180.741649][ T4204] CPU: 0 PID: 4204 Comm: kworker/u5:7 Tainted: G    B             syzkaller #0
[  180.750607][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  180.760666][ T4204] Workqueue: hci3 hci_rx_work
[  180.765354][ T4204] Call Trace:
[  180.768635][ T4204]  <TASK>
[  180.771566][ T4204]  dump_stack_lvl+0x188/0x250
[  180.776265][ T4204]  ? show_regs_print_info+0x20/0x20
[  180.781476][ T4204]  ? load_image+0x410/0x410
[  180.786092][ T4204]  panic+0x2f8/0x850
[  180.790028][ T4204]  ? bpf_jit_dump+0xd0/0xd0
[  180.794541][ T4204]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  180.800529][ T4204]  ? _raw_spin_unlock+0x40/0x40
[  180.805384][ T4204]  ? hci_le_meta_evt+0x12ea/0x3ca0
[  180.810518][ T4204]  check_panic_on_warn+0x80/0xa0
[  180.815459][ T4204]  ? hci_le_meta_evt+0x12ea/0x3ca0
[  180.820570][ T4204]  end_report+0x6d/0xf0
[  180.824730][ T4204]  kasan_report+0x102/0x130
[  180.829236][ T4204]  ? hci_le_meta_evt+0x12ea/0x3ca0
[  180.834351][ T4204]  hci_le_meta_evt+0x12ea/0x3ca0
[  180.839289][ T4204]  ? hci_event_packet+0x363/0x1310
[  180.844417][ T4204]  ? __lock_acquire+0x7b50/0x7b50
[  180.849450][ T4204]  ? hci_remote_host_features_evt+0x240/0x240
[  180.855535][ T4204]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  180.861173][ T4204]  ? mark_lock+0x94/0x320
[  180.865500][ T4204]  ? mutex_unlock+0x10/0x10
[  180.870001][ T4204]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  180.875989][ T4204]  ? lock_chain_count+0x20/0x20
[  180.880857][ T4204]  ? __rwlock_init+0x140/0x140
[  180.885618][ T4204]  hci_event_packet+0xe0b/0x1310
[  180.890580][ T4204]  ? _raw_spin_unlock+0x40/0x40
[  180.895433][ T4204]  ? rcu_lock_release+0x20/0x20
[  180.900284][ T4204]  ? hci_send_to_monitor+0x9c/0x4a0
[  180.905485][ T4204]  hci_rx_work+0x255/0xa10
[  180.909904][ T4204]  process_one_work+0x867/0xff0
[  180.914768][ T4204]  ? worker_detach_from_pool+0x240/0x240
[  180.920398][ T4204]  ? lockdep_hardirqs_off+0x70/0x100
[  180.925697][ T4204]  ? _raw_spin_lock_irq+0xb7/0xf0
[  180.930722][ T4204]  ? _raw_spin_lock_irqsave+0x100/0x100
[  180.936290][ T4204]  ? wq_worker_running+0x97/0x170
[  180.941313][ T4204]  worker_thread+0xad7/0x12a0
[  180.945997][ T4204]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  180.951897][ T4204]  kthread+0x42e/0x520
[  180.955962][ T4204]  ? rcu_lock_release+0x20/0x20
[  180.960819][ T4204]  ? kthread_blkcg+0xd0/0xd0
[  180.965425][ T4204]  ret_from_fork+0x1f/0x30
[  180.969849][ T4204]  </TASK>
[  180.972997][ T4204] Kernel Offset: disabled
[  180.977332][ T4204] Rebooting in 86400 seconds..