last executing test programs:

11m27.40702664s ago: executing program 2 (id=3):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x9)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000"], 0x28}, 0x1, 0x0, 0x0, 0x6008044}, 0x40844)

11m26.445421281s ago: executing program 2 (id=8):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000880)={0x2c, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x2c}}, 0x0)

11m25.226175858s ago: executing program 2 (id=11):
r0 = socket(0x10, 0x1, 0x3)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r2, 0x0, 0x1066, 0x9)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)
socket(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

11m14.833389814s ago: executing program 2 (id=24):
mprotect(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0xcc17f, 0x0)

10m59.406850315s ago: executing program 32 (id=24):
mprotect(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0xcc17f, 0x0)

9m2.542532276s ago: executing program 3 (id=352):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x800010, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

9m1.486568962s ago: executing program 3 (id=356):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320000908070905020340"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)

8m58.355970071s ago: executing program 3 (id=366):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYRES32=r1], 0x40}}, 0x0)
close(0x4)

8m57.428218926s ago: executing program 3 (id=370):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x202)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x9}, 0x18)

8m56.294857277s ago: executing program 3 (id=372):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x1, 0x6}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

8m55.279773753s ago: executing program 3 (id=378):
fsopen(&(0x7f0000000180)='btrfs\x00', 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400)

8m39.703498469s ago: executing program 33 (id=378):
fsopen(&(0x7f0000000180)='btrfs\x00', 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400)

7m59.322877601s ago: executing program 5 (id=551):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x7fff, 0x0, 0x0, 0x9, 0xc1, 0x16c0, 0x9, 0x97d8, 0x1, 0x9, 'syz1\x00'})
socket$kcm(0x2, 0xa, 0x2)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
write$tun(r0, &(0x7f0000000300)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x6, 0x1}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x9c, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "786b8afe8ef6c8e90c1e350689fcd4d61b4576015011084c54b22430637a2838", "563c538774ee22ce2bb8f46f7373cb97218dd5ee5af3108bd6d195c614d44230e598e0731465bf4fcdfa004c93ce4b4e", "02833533ce8152a09040f08bd2892b7233376dcda3f0b6962e66f617", {"2e7c8cbccc480860f94cd609888bc51a", "38a461132eddc6aef8a88f02e0ed7e13"}}}}}}}}}, 0xda)

7m58.152391748s ago: executing program 5 (id=555):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x203, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0xf9, 0x8000, 0x0, "7a58beca3900000000000000000000000200"})

7m57.05800973s ago: executing program 5 (id=558):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8000000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x4ac, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x45c, 0x3, 0x0, 0x1, [{0x458, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x6c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_ELEM_DATA={0x90, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8b, 0x1, "7cf688f43529e10185c2b1e18cfa700c9f88d9c044678127321ab7a91de6299b5f5f4334cf3011adbcbc6fcee9f6e4ac4bc66715549f41615d0cbe21125d130b323532561453331514a178aaec96fee5c0752f3d6d708e21020ff2549d2c2b7a6a30746bca01c5da9c74a88089ff86136a01002fa127523f919b59aaa77bb0e99e432360714d96"}]}, @NFTA_SET_ELEM_USERDATA={0xb3, 0x6, 0x1, 0x0, "fd5770fbc0b52d540a74ba8dba8991b0ed91eaac6509a2739f119ee819a75ecd169a440c57df038ce40835382716ea9f30e91e8f9852a676749a5ac717a75129c23dd39424225e7c70171b944a170371e6684761cffd449ed7f1fd21ff85e2118857cec57d2f6fe3cc5b2a9ea152ec846132e3d5abdb1bf5794a984537ef0a01c18b90595ba563c1fabd21630c41520eb1d3df015ca08802eafcc0df6619e20825d2bc259ea53c29d249a0c2f551c4"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x218, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf9, 0x1, "0f3c75de5118c93bf1afa338271713249691227d468cb764c1cfd0907aa6b7dc65377afca11f53749dbce05614c0bf44270a4eab9084ca6f2c420236c1afe820c29359c63753961aa561471223734a9525581ab42286541b483aa3d7982ea881d98417539d8609034d1772cfa5ce3657234d75cadc3a208bcfd9f72e2c2f82e54cb826e25d9f6e20d59e454772a93e704a4ed66259bc760de303582631c9d4b6cac6e715db7a5977245001dd3f1ac678d228325b2e698d0313864c5982c74e9cb25c98a3f11ab5d4d352bb059ebfb3117d95dfed51d567a7e3f61a404e4b624121a3620869ef92a7f70d4d639873e9db789839a9f3"}, @NFTA_DATA_VALUE={0x38, 0x1, "950a112a37279c3eb36d835a87e4c0e05345c0299a7206c469147af9cbc1b36185c421871fc41f6ae3c1ad0edf96db8679ad61d0"}, @NFTA_DATA_VALUE={0xcf, 0x1, "d13001315a2caf400ba56b8fed72640030c62bcd380023481ec3f353f7c6b0db8a87ac2f47d9f1ffb97230559a8858229214761d582cf874c55923eb0af8821e9f4be49fc2bff359a55549c2254ea56c048d601c6b32a1d6a8df6b848fdc8654aa360aec6cb87201c13a85db4734d3bac9b736c31158639aec578f405c77d5a7c627be80c6c3a0eede02df2030f548f67275e4e317123061b80075b29cfcc98c0faa4e2679c92f9ff887cab8cfbfa12b25698bca42728b5869e0ac5824154870b15162a53cab25559694e9"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x626}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x510}}, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x80008, 0xffffffff}, 0xd0, 0x9}})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xb)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4})
syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0)
r3 = dup(0xffffffffffffffff)
write$UHID_INPUT(r3, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006)

7m54.421419183s ago: executing program 5 (id=564):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41040000015001001800128008000100677470000c000280080001", @ANYRES32=r1], 0x40}}, 0x0)
close(0x4)

7m53.443066959s ago: executing program 5 (id=567):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100))
r1 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000140)=0xfff)

7m52.510464784s ago: executing program 5 (id=571):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0)

7m37.194877081s ago: executing program 34 (id=571):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0)

6m31.11115425s ago: executing program 4 (id=760):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7})

6m29.565794312s ago: executing program 4 (id=765):
unshare(0x28000600)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x44b, 0x70bd2c, 0x25dfdbf8, {0x7a, 0x0, 0x0, 0x0, 0x1008, 0x9022}}, 0x20}}, 0x20000840)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0x10)

6m28.581514466s ago: executing program 4 (id=767):
bpf$OBJ_GET_PROG(0x9, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = mq_open(0x0, 0x40, 0x2d, 0x0)
lseek(r1, 0x0, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
syz_emit_ethernet(0x66, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000001280), 0x3)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, '\x00\x00\x00\x00\x00\x00\x00@', "0bf70000000000000000061000000001", "00000004", "ba0200"}, 0x28)
setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f00000001c0)=@ccm_128={{0x304}, "bd85475b1379ad1c", "38fa4c1636d8ea5fca0abefb3b226077", "0bb21c98", "ce162769bce2e9a0"}, 0x28)

6m26.85847886s ago: executing program 4 (id=773):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x3a, 0x0, "33d080577968b3107694c2858f48c27f17ef54caf822abcfad9399c494d846140482c7e40195d5f034a72c69ed7330f3000f530ff9525fad6b3db9851a4354d70cc3734d319f852c370cbc9e69c75987"}, 0xd8)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r1=>r0, {0xb, 0x8}}, '.\x00'})
read$FUSE(r1, &(0x7f0000003d00)={0x2020}, 0x2020)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000025c0)={{{@in6=@private1, @in=@multicast1}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="54cdfa5e", @ANYRES16=r7, @ANYBLOB="0700000000000000000002000000"], 0x14}}, 0x0)
recvmmsg(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/4096, 0x1000}], 0x2}, 0x6}], 0x1, 0x40030002, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r5)
recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0)
r8 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r8, 0xc0745645, &(0x7f0000000080)={0x84, [0x2, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffc, 0x0, 0x800, 0x0, 0x0, 0x208, 0x80, 0x0, 0x400, 0xfffe, 0x8, 0x2000, 0x0, 0x638, 0x8, 0x0, 0x0, 0x0, 0xfff9, 0x6, 0x5, 0x0, 0x222, 0x980, 0x0, 0x0, 0x3, 0xd1b, 0x1, 0x7f, 0x200, 0x8, 0x6, 0x0, 0xffff], 0x5})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, 0x0, 0x0)
r10 = socket$inet6(0xa, 0x3, 0x8a)
setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@mcast2, @in6=@remote, 0x4e22, 0x0, 0x4, 0x3, 0x2, 0x0, 0x80}, {0x10000, 0xffff, 0x40000000004, 0x80000001, 0x100000000, 0x4, 0x7, 0x9}, {0x5, 0xf641, 0x0, 0xfffffffffffffffd}, 0x80, 0xfffffff9, 0x2, 0x0, 0x6, 0x2}, {{@in=@empty, 0x4da, 0x33}, 0xa, @in=@broadcast, 0x3502, 0x1, 0x1, 0x20, 0x9, 0x7, 0x7}}, 0xe8)

6m25.162858147s ago: executing program 4 (id=778):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

6m21.785583713s ago: executing program 4 (id=788):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)
unshare(0x2c020400)
shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil)
write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x19)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r4, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0x3, 0x0, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_DEV_CREATE(r4, 0x5501)

6m5.702465173s ago: executing program 35 (id=788):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)
unshare(0x2c020400)
shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil)
write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x19)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r4, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0x3, 0x0, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_DEV_CREATE(r4, 0x5501)

6m4.051835349s ago: executing program 6 (id=827):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000007200)={0x0, 0x0, &(0x7f00000071c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4044804}, 0x800)

6m2.757098305s ago: executing program 6 (id=829):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}], 0x1}}], 0x1, 0x0, 0x0)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7})

6m1.639567362s ago: executing program 6 (id=833):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r7, 0x0, 0xc010)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x8, 0x8, 0x8, 0xcfe, 0x3, 0x80000000, 0x8a5, 0x6, 0x10, 0x8, 0xb, 0x2, 0xf6cb, 0x6ab, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x7fffffff, 0x10000, 0x7, 0x0, 0x0, 0x7, 0x6, 0xfffffffe, 0x372b, 0xfffffffe, 0x1000, 0xfffffffa, 0x8, 0xae6, 0x6, 0xfffffffc, 0x1, 0x0, 0x7e, 0x8, 0x9d, 0x3, 0x240, 0x1, 0x7, 0x7, 0x6, 0x1000, 0x2007, 0xb, 0x401, 0x789f, 0x7ff, 0x3, 0x8, 0x800, 0x9, 0x10000, 0x6, 0xff, 0x8, 0x8226, 0x400, 0x401, 0xc709, 0x7, 0x5, 0x3, 0x7, 0x10000, 0x4, 0x40, 0x8, 0xc1, 0x7, 0x3ff, 0x200, 0x1, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0xa, 0xfffffffc, 0x1, 0x0, 0x9, 0x2, 0x4, 0x2, 0xc, 0x7b, 0xff, 0x800, 0x4, 0x80, 0x5, 0x4, 0x5, 0x1000, 0x5, 0x7, 0x40, 0x4d27, 0x2, 0x6, 0x8226, 0xe, 0x81, 0x3, 0x5, 0x3800000, 0xf12, 0x0, 0x2, 0x8911, 0x9, 0x7f43, 0x9, 0x2, 0x0, 0x3, 0x8, 0x2, 0x2, 0x2, 0xd098, 0x4, 0x8, 0x3, 0xa, 0xf7, 0x4, 0x3, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0x81, 0xffff6660, 0x1, 0x3, 0x4, 0x0, 0x9, 0x3, 0x6, 0x5, 0xd7a, 0xfffffff9, 0x3, 0x8, 0x2, 0xfffffffd, 0x3864, 0x4, 0xb, 0x1, 0x4, 0x4a, 0x82ca, 0x4eeb, 0x6, 0xbdd, 0x5fdf, 0xc, 0x3, 0x10000, 0x9, 0x54, 0x8, 0x8, 0x800, 0x1ff, 0x9, 0xccc, 0x1, 0x7, 0x7ff, 0x4, 0xe, 0xc, 0xb, 0x80000001, 0x8001, 0x4, 0x9, 0xfffffffe, 0xfffffffa, 0x6, 0xb, 0x7ff, 0x1, 0x10, 0x2, 0x1, 0x4a0, 0x6, 0x0, 0x3ff, 0x9, 0x7, 0x1, 0x5, 0x7, 0x1, 0xfffffe01, 0x8001, 0x6, 0x3, 0x3, 0x9, 0x2, 0x4, 0x0, 0x1, 0x100, 0x4, 0x3, 0xffffff00, 0x6, 0x4, 0x3, 0x6, 0x5, 0x5c49, 0x7f, 0x7, 0x8cc7, 0x7, 0x0, 0x1, 0xcc99, 0x3, 0xb, 0x0, 0xffff, 0x0, 0xb64, 0x4, 0xf, 0x9, 0x77dc, 0x8, 0x1, 0x4, 0x7ff, 0x7, 0x10, 0x8, 0xffff, 0xfff, 0x8, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r11=>0x0})
sendto$packet(r10, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ipvlan0\x00', <r12=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r13=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d00000000000030001280080001006873720024", @ANYRES32=r13, @ANYRES32=r12], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0)

5m59.881109832s ago: executing program 6 (id=838):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618", 0x6f}, {0x0}, {&(0x7f0000000780)}], 0x3}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x18}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00', <r0=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x403, 0x0, 0xfffffd, {0x0, 0x0, 0x3, r0, 0x808, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r0, 0x1ac20, 0x404}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4894}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r2, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000)
r3 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

5m57.810015192s ago: executing program 6 (id=842):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}], 0x1}}], 0x1, 0x0, 0x0)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7})

5m56.350039145s ago: executing program 6 (id=844):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r2, &(0x7f0000000580)=""/102400, 0x19000)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
close(r3)

5m40.814628021s ago: executing program 36 (id=844):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r2, &(0x7f0000000580)=""/102400, 0x19000)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
close(r3)

23.818601242s ago: executing program 7 (id=1321):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast})
syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000030904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c81"], 0x0)
write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef)

21.139618436s ago: executing program 7 (id=1328):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000015c0)=@newtaction={0x100, 0x30, 0xa20, 0x70bd26, 0x25dfdbfd, {}, [{0xec, 0x1, [@m_ipt={0xbc, 0x7, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0xb16d, 'security\x00', 0x3, 0x8}}]}, {0x65, 0x6, "3d0155179af52c218360f63b587b119bad958e13fdbef37483f1f2edf990373f1d7af2b17f247597099a981c0d86da1867e12c5be84d558a41eeaa0b3557e239bac0e1583360beff1ca128be336489bdfc2a0e7d3aed52c86121b03ee2a4749a64"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x100}}, 0x40c1)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/123, 0x7b}], 0x2}, 0xb}], 0x2, 0x10, 0x0)

19.300396074s ago: executing program 0 (id=1329):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x7ff})

14.582081699s ago: executing program 9 (id=1331):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x20, {0x0, 0x0, 0x0, 0x0, 0xdf15003157970008, 0x20c0}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x0, 0xb}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000010)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00', @ANYBLOB], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043eae0f", @ANYRESDEC=r0, @ANYRES16=r2], 0xc)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000004f80)={'vxcan0\x00', <r5=>0x0})
sendmsg$can_j1939(r4, &(0x7f0000006280)={&(0x7f0000005200)={0x1d, r5, 0x0, {0x3, 0x0, 0x1}, 0xff}, 0x18, &(0x7f0000006240)={&(0x7f0000005240)}, 0x1, 0x0, 0x0, 0x24000090}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x1}, 0x94)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='ntfs3\x00', 0x0, &(0x7f00000001c0)='discard')
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'})
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x40)
write$9p(r6, &(0x7f0000000080)="1eeeda4c0d052b331ff2f44ebf5f61700740937407ebd1fa8962a6683d262925bd9c41c2c7c8ebb1c41b935316c459ab8746b5d1ee75c03e191d5762", 0x3c)
r7 = syz_genetlink_get_family_id$nl802154(0x0, r0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000005c193ce80e210af87fad3cf5927a0a35998a23d463f3e3366dc8c0544324e99c59232d35c3b7230fdb4f77e1d879241f84eb3e556ef9c618e55748d3faa7c81669ff29aec731ec18930594ad52d2d88422b05ecf3065ecfe", @ANYRES16=r7, @ANYBLOB="08002dbd7000fddbdf250100000008000100ff"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000)

13.771278373s ago: executing program 0 (id=1333):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ac1414aa050007008400000006000440462000000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80)

13.597956578s ago: executing program 9 (id=1334):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$tun(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0xdc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0}, 0x40)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x101102, 0x0)
r4 = syz_usbip_server_init(0x1)
write$usbip_server(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x35)
accept4$nfc_llcp(r1, &(0x7f0000001c80), &(0x7f0000001d00)=0x60, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000003400), 0x202800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000003440)={0x0, "ad3337f035ac28f834c435a58261ad19791980a6a5290466746eb48b2a13f2e2"})
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48011)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="020500dc0077"], 0x33fe0}, 0x1, 0x7}, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'veth1_virt_wifi\x00', &(0x7f0000000180)=@ethtool_rxfh={0x46, 0x1, 0xf35b, 0x8, 0xf, "c8cdd2", 0x3, [0x1000007, 0x593672b, 0xfff]}})
ioctl$SG_IO(r3, 0x2285, 0x0)

13.288655677s ago: executing program 7 (id=1335):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c0c4}, 0x0)

13.242829005s ago: executing program 1 (id=1336):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0xbc, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2})
r3 = eventfd(0x3ff)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1ff, 0x50000, 0x0, r3, 0x4})

12.92669546s ago: executing program 0 (id=1337):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast})
syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000030904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c8100"], 0x0)
write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef)

12.106933932s ago: executing program 1 (id=1338):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002800000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000680)='GPL\x00'}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="f6b9c89b00"/14, 0x0, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.982644438s ago: executing program 7 (id=1339):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r4=>0x0)
io_submit(r4, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r3, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}])

5.53994119s ago: executing program 1 (id=1340):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f00000041c0)={&(0x7f00000035c0)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x6}, 0x1c, 0x0, 0x0, 0x0, 0x28}, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x37)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48)
write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x2, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x800c, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x4, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x6, 0xe, 0x5, 0x7, 0x6, 0x2, 0x2, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x101, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x7, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x6, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))
readv(r2, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x18}], 0x1)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000100)=0x40000000, 0x4)
getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000080), &(0x7f00000001c0)=0x4)
write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x9, 0x3}, 0x18)

5.103604477s ago: executing program 9 (id=1341):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x2)
fchdir(r3)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)

4.604235678s ago: executing program 0 (id=1342):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
epoll_create(0x103)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

4.264928406s ago: executing program 1 (id=1343):
unshare(0x24040400)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x2a9e524, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

4.144103396s ago: executing program 9 (id=1344):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
socket$kcm(0x10, 0x2, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)}, {&(0x7f0000001480)="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", 0x1001}], 0x3)

3.820374438s ago: executing program 0 (id=1345):
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x80008, 0xffffffff}, 0xd0, 0x9}})
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000002140)={0xf, {"a2e3ad214fc752f91b500e0f30f70e06d038e7ff7fc6e5539b3275078b089b3b08385d090890e0878f0e1ac6e7049b3d6d959bffe8d178708c523c921b1b5b31300d3b5d0736cd3b78130baa61d8e809fc889b0709b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b906000000783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51015f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ff33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f761f13a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a99cc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000029566e78000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebbd633500", 0x1000}}, 0x1006)

3.338365569s ago: executing program 9 (id=1346):
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00)
io_submit(0x0, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

1.457891432s ago: executing program 7 (id=1347):
mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
listxattr(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000b40)=""/6, 0x6)

1.208866761s ago: executing program 1 (id=1348):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000003140), 0xc0000, 0x0)
ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000003840))

31.002775ms ago: executing program 0 (id=1349):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80a0000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000440)=0x200000000)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000480)=0x1)

23.224747ms ago: executing program 1 (id=1350):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2)
r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2)
ftruncate(r1, 0xffff)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000040)=0x3)

11.172982ms ago: executing program 7 (id=1351):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast})
syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000030904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c8100"], 0x0)
write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef)

0s ago: executing program 9 (id=1352):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856afe13be00", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40004, 0x1})
preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmstat\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

W filter on device netdevsim0
[  552.865195][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  552.866062][  T806] usb 2-1: USB disconnect, device number 31
[  552.872348][    C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  553.068425][  T806] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  553.121853][ T8510] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  553.255660][ T8510] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  553.338847][ T8510] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  553.427324][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.7.881'.
[  553.493495][ T8510] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  553.538328][ T8085] bridge_slave_1: left allmulticast mode
[  553.579447][ T8085] bridge_slave_1: left promiscuous mode
[  553.628790][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.702192][ T8085] bridge_slave_0: left allmulticast mode
[  553.725925][ T8085] bridge_slave_0: left promiscuous mode
[  553.765649][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.933913][ T8085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  555.002961][ T8085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  555.021336][ T8085] bond0 (unregistering): Released all slaves
[  555.035680][ T8746] netlink: 'syz.1.883': attribute type 4 has an invalid length.
[  555.056663][ T8737] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  555.062588][ T8510] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  555.248833][ T8510] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  555.391737][ T5226] 8021q: adding VLAN 0 to HW filter on device eth14
[  557.034207][ T8763] netlink: 32 bytes leftover after parsing attributes in process `syz.1.887'.
[  557.077714][ T8085] hsr_slave_0: left promiscuous mode
[  557.121194][ T8085] hsr_slave_1: left promiscuous mode
[  557.166859][ T8085] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  557.215675][ T8085] batman_adv: batadv0: Removing interface: batadv_slave_0
[  557.272501][ T8085] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  557.298045][ T8085] batman_adv: batadv0: Removing interface: batadv_slave_1
[  557.427533][ T8085] veth1_macvtap: left promiscuous mode
[  557.459511][ T8085] veth0_macvtap: left promiscuous mode
[  557.478442][ T8085] veth1_vlan: left promiscuous mode
[  557.493991][ T8085] veth0_vlan: left promiscuous mode
[  559.600360][ T8085] team0 (unregistering): Port device team_slave_1 removed
[  559.769271][ T8085] team0 (unregistering): Port device team_slave_0 removed
[  561.164997][ T8761] syzkaller0: entered promiscuous mode
[  561.194505][ T8761] syzkaller0: entered allmulticast mode
[  563.182439][  T806] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  563.512738][ T5680] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  564.521423][  T806] usb 8-1: config 0 has an invalid interface number: 8 but max is 0
[  566.261829][ T5680] usb 1-1: Using ep0 maxpacket: 16
[  566.449056][  T806] usb 8-1: config 0 has no interface number 0
[  566.456683][  T806] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  566.468590][  T806] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  566.479961][  T806] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  567.898119][ T8510] 8021q: adding VLAN 0 to HW filter on device bond0
[  571.590770][  T806] usb 8-1: string descriptor 0 read error: -32
[  571.596209][ T8510] 8021q: adding VLAN 0 to HW filter on device team0
[  571.612443][ T5680] usb 1-1: device descriptor read/all, error -71
[  571.614398][  T806] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  572.588214][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  572.594962][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  572.609681][  T806] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  572.624236][  T806] usb 8-1: config 0 descriptor??
[  572.630776][  T806] usb 8-1: can't set config #0, error -71
[  573.628606][  T806] usb 8-1: USB disconnect, device number 7
[  575.843527][ T5709] bridge0: port 1(bridge_slave_0) entered blocking state
[  575.851162][ T5709] bridge0: port 1(bridge_slave_0) entered forwarding state
[  576.083735][ T8795] netlink: 'syz.0.893': attribute type 4 has an invalid length.
[  576.084150][ T5709] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.099178][ T5709] bridge0: port 2(bridge_slave_1) entered forwarding state
[  577.346833][ T8656] bridge0: port 1(bridge_slave_0) entered blocking state
[  577.403617][ T8656] bridge0: port 1(bridge_slave_0) entered disabled state
[  577.452481][ T8656] bridge_slave_0: entered allmulticast mode
[  577.516913][ T8656] bridge_slave_0: entered promiscuous mode
[  577.661177][ T8656] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.701351][ T8656] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.792121][ T8656] bridge_slave_1: entered allmulticast mode
[  577.858170][ T8656] bridge_slave_1: entered promiscuous mode
[  578.567469][ T8656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  578.780083][ T8656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  578.784246][ T5586] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  578.810579][ T5586] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  578.821965][ T5586] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  578.842749][ T5586] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  578.857768][ T5586] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  579.590673][ T8827] syzkaller0: entered promiscuous mode
[  579.681691][ T8827] syzkaller0: entered allmulticast mode
[  579.786936][ T8818] netlink: 32 bytes leftover after parsing attributes in process `syz.0.899'.
[  579.872908][ T8656] team0: Port device team_slave_0 added
[  580.036246][ T8656] team0: Port device team_slave_1 added
[  580.754442][ T8656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  580.803919][ T8656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  580.902974][ T5582] Bluetooth: hci5: command tx timeout
[  580.957829][ T8656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  581.068294][ T8656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  581.127198][ T8656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  581.264590][ T8656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  581.881850][  T806] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  582.112980][  T806] usb 2-1: Using ep0 maxpacket: 16
[  582.210631][  T806] usb 2-1: unable to get BOS descriptor or descriptor too short
[  582.338776][ T8656] hsr_slave_0: entered promiscuous mode
[  582.462439][ T8656] hsr_slave_1: entered promiscuous mode
[  582.601916][ T8656] debugfs: 'hsr0' already exists in 'hsr'
[  582.736705][  T806] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  582.783779][ T8656] Cannot create hsr debugfs directory
[  582.798475][  T806] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  582.861276][  T806] usb 2-1: No eUSB2 isoc ep 129 companion for config 1 interface 0 altsetting 0
[  582.877911][ T5226] 8021q: adding VLAN 0 to HW filter on device eth15
[  582.898195][ T8844] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  582.972083][ T5582] Bluetooth: hci5: command tx timeout
[  582.983483][  T806] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  583.157117][  T806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.246745][  T806] usb 2-1: Product: syz
[  583.295071][  T806] usb 2-1: Manufacturer: syz
[  583.328710][  T806] usb 2-1: SerialNumber: syz
[  583.760322][  T806] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  583.801132][  T806] cdc_ncm 2-1:1.0: bind() failure
[  584.009146][  T806] usb 2-1: USB disconnect, device number 32
[  584.027529][   T30] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[  584.281166][   T30] usb 8-1: config 0 has an invalid interface number: 8 but max is 0
[  584.321786][   T30] usb 8-1: config 0 has no interface number 0
[  584.350101][   T30] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  584.379862][   T30] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  584.428386][   T30] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  584.501153][   T30] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  584.555788][   T30] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  584.599741][   T30] usb 8-1: Product: syz
[  584.620693][   T30] usb 8-1: SerialNumber: syz
[  584.683922][   T30] usb 8-1: config 0 descriptor??
[  584.801220][   T30] cm109 8-1:0.8: invalid payload size 0, expected 4
[  584.871050][   T30] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input23
[  585.052379][ T5582] Bluetooth: hci5: command tx timeout
[  587.132004][ T5582] Bluetooth: hci5: command tx timeout
[  587.388010][    C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  587.390864][   T10] usb 8-1: USB disconnect, device number 8
[  587.395161][    C1] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  587.607027][   T10] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  587.851908][ T5680] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  588.125234][ T5680] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  588.191174][ T5680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  588.270525][ T5680] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  588.344022][ T5680] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  588.415519][ T5680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.527296][ T5680] usb 2-1: config 0 descriptor??
[  588.927021][ T3292] bridge_slave_1: left allmulticast mode
[  588.942077][   T10] usb 2-1: USB disconnect, device number 33
[  588.992474][ T3292] bridge_slave_1: left promiscuous mode
[  589.013391][ T8883] netlink: 24 bytes leftover after parsing attributes in process `syz.7.910'.
[  589.056455][ T3292] bridge0: port 2(bridge_slave_1) entered disabled state
[  589.195117][ T3292] bridge_slave_0: left allmulticast mode
[  589.230900][ T3292] bridge_slave_0: left promiscuous mode
[  589.266847][ T3292] bridge0: port 1(bridge_slave_0) entered disabled state
[  590.684056][ T3292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  590.735531][ T3292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  590.770761][ T3292] bond0 (unregistering): Released all slaves
[  590.944297][ T8879] syzkaller0: entered promiscuous mode
[  590.960332][ T8879] syzkaller0: entered allmulticast mode
[  591.244079][ T8656] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  591.388592][ T8656] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  591.599682][ T3292] hsr_slave_0: left promiscuous mode
[  591.682938][ T3292] hsr_slave_1: left promiscuous mode
[  591.722256][ T3292] batman_adv: batadv0: Removing interface: batadv_slave_0
[  591.820106][ T3292] batman_adv: batadv0: Removing interface: batadv_slave_1
[  592.117522][   T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  592.326237][   T10] usb 2-1: Using ep0 maxpacket: 16
[  592.383233][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  592.437164][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  592.513687][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  592.588538][   T10] usb 2-1: No eUSB2 isoc ep 129 companion for config 1 interface 0 altsetting 0
[  592.712289][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  592.773170][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.821430][   T10] usb 2-1: Product: syz
[  592.850834][   T10] usb 2-1: Manufacturer: syz
[  592.882925][   T10] usb 2-1: SerialNumber: syz
[  593.316015][   T10] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  593.352678][   T10] cdc_ncm 2-1:1.0: bind() failure
[  593.548484][   T10] usb 2-1: USB disconnect, device number 34
[  593.727098][ T3292] team0 (unregistering): Port device team_slave_1 removed
[  593.954476][ T3292] team0 (unregistering): Port device team_slave_0 removed
[  594.620110][ T8922] netlink: 'syz.1.918': attribute type 4 has an invalid length.
[  595.088090][ T8656] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  595.164137][ T8656] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  595.234946][ T5226] 8021q: adding VLAN 0 to HW filter on device eth16
[  595.279994][ T8656] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  595.409151][ T8656] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  595.455931][ T8656] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  595.573500][ T8656] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  596.321812][   T10] usb 2-1: new low-speed USB device number 35 using dummy_hcd
[  596.564722][   T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  596.600325][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  596.661024][   T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  596.708611][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  596.737175][ T8934] syzkaller0: entered promiscuous mode
[  596.789671][ T8934] syzkaller0: entered allmulticast mode
[  596.789734][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  596.808787][ T8938] netlink: 24 bytes leftover after parsing attributes in process `syz.7.922'.
[  596.869493][   T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  596.913878][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  596.983993][   T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  597.062468][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  597.137057][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  597.218157][   T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  597.269846][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  597.329129][   T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  597.405861][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  597.473610][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  597.594018][   T10] usb 2-1: string descriptor 0 read error: -22
[  597.636638][   T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  597.701256][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.900103][   T10] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  598.056348][   T10] usb 2-1: USB disconnect, device number 35
[  599.054307][ T8656] 8021q: adding VLAN 0 to HW filter on device bond0
[  599.381239][ T8656] 8021q: adding VLAN 0 to HW filter on device team0
[  599.489168][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  599.496651][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  599.592341][   T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  599.650031][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[  599.657580][ T5822] bridge0: port 2(bridge_slave_1) entered forwarding state
[  599.882130][   T10] usb 2-1: Using ep0 maxpacket: 16
[  600.004567][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  600.088795][   T10] usb 2-1: unable to read config index 0 descriptor/start: -71
[  600.123292][   T10] usb 2-1: can't read configurations, error -71
[  600.537763][ T8819] bridge0: port 1(bridge_slave_0) entered blocking state
[  600.574476][ T8819] bridge0: port 1(bridge_slave_0) entered disabled state
[  600.612091][ T8819] bridge_slave_0: entered allmulticast mode
[  600.649752][ T8819] bridge_slave_0: entered promiscuous mode
[  600.749279][ T8819] bridge0: port 2(bridge_slave_1) entered blocking state
[  600.785983][ T8819] bridge0: port 2(bridge_slave_1) entered disabled state
[  600.831111][ T8819] bridge_slave_1: entered allmulticast mode
[  600.882119][ T8819] bridge_slave_1: entered promiscuous mode
[  601.897041][ T8970] netlink: 'syz.1.929': attribute type 4 has an invalid length.
[  602.589883][ T8819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  602.780725][ T8819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  602.835275][ T8978] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  602.845663][ T8978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  602.859077][ T8978] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  602.879969][ T8978] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  602.906718][ T8978] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  603.451992][ T5582] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  603.458426][ T8978] Bluetooth: hci0: command 0x0c1a tx timeout
[  603.869328][ T8819] team0: Port device team_slave_0 added
[  604.052559][ T8819] team0: Port device team_slave_1 added
[  604.788585][ T8819] batman_adv: batadv0: Adding interface: batadv_slave_0
[  604.845803][ T8819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  604.976012][ T8978] Bluetooth: hci1: command tx timeout
[  604.995193][ T8819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  605.203570][ T8819] batman_adv: batadv0: Adding interface: batadv_slave_1
[  605.244228][ T8819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  605.389797][ T8819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  605.580183][ T8998] netlink: 24 bytes leftover after parsing attributes in process `syz.7.932'.
[  605.636489][ T8992] bond2: entered promiscuous mode
[  605.649340][ T8996] syzkaller0: entered promiscuous mode
[  605.676276][ T8996] syzkaller0: entered allmulticast mode
[  605.940262][ T5226] 8021q: adding VLAN 0 to HW filter on device eth17
[  607.052616][ T8978] Bluetooth: hci1: command tx timeout
[  607.125159][ T8819] hsr_slave_0: entered promiscuous mode
[  607.164995][ T8819] hsr_slave_1: entered promiscuous mode
[  607.194225][ T8819] debugfs: 'hsr0' already exists in 'hsr'
[  607.226469][ T8819] Cannot create hsr debugfs directory
[  607.973424][ T5686] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  608.164746][ T5686] usb 1-1: Using ep0 maxpacket: 16
[  608.280424][ T5686] usb 1-1: unable to get BOS descriptor or descriptor too short
[  608.328803][ T5686] usb 1-1: unable to read config index 0 descriptor/start: -71
[  608.387776][ T5686] usb 1-1: can't read configurations, error -71
[  608.532858][ T9018] netlink: 'syz.7.939': attribute type 4 has an invalid length.
[  609.131947][ T5582] Bluetooth: hci1: command tx timeout
[  610.012104][ T5582] Bluetooth: hci2: command 0x0406 tx timeout
[  610.495712][ T9029] bond3: entered promiscuous mode
[  611.212156][ T8978] Bluetooth: hci1: command tx timeout
[  611.829523][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.944'.
[  612.116683][ T5822] bridge_slave_1: left allmulticast mode
[  612.158624][ T5822] bridge_slave_1: left promiscuous mode
[  612.187159][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[  612.272180][ T5822] bridge_slave_0: left allmulticast mode
[  612.303928][ T5822] bridge_slave_0: left promiscuous mode
[  612.350823][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[  613.824083][ T9064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.949'.
[  614.410230][ T5822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  614.531373][ T5822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  614.627772][ T5822] bond0 (unregistering): Released all slaves
[  614.714787][ T9038] syzkaller0: entered promiscuous mode
[  614.745048][ T9038] syzkaller0: entered allmulticast mode
[  615.048213][ T1223] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  615.242216][ T1223] usb 1-1: Using ep0 maxpacket: 16
[  615.374371][ T1223] usb 1-1: unable to get BOS descriptor or descriptor too short
[  615.453743][ T1223] usb 1-1: unable to read config index 0 descriptor/start: -71
[  615.520713][ T1223] usb 1-1: can't read configurations, error -71
[  615.609860][ T5822] hsr_slave_0: left promiscuous mode
[  615.667247][ T5822] hsr_slave_1: left promiscuous mode
[  615.710548][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0
[  615.757908][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1
[  616.835049][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'.
[  616.886971][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'.
[  616.958046][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.953'.
[  617.788553][ T5822] team0 (unregistering): Port device team_slave_1 removed
[  617.956980][ T5822] team0 (unregistering): Port device team_slave_0 removed
[  619.045117][ T5226] 8021q: adding VLAN 0 to HW filter on device eth18
[  619.293460][ T9079] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  620.328497][ T9091] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[  621.277936][ T8819] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  621.471917][ T8819] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  621.778803][ T8819] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  621.973589][ T8819] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  622.050526][ T8819] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  622.228196][ T8819] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  622.269933][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'.
[  622.336055][ T8819] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  622.509043][ T8819] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  622.568170][ T9105] syzkaller0: entered promiscuous mode
[  622.626651][ T9105] syzkaller0: entered allmulticast mode
[  625.251093][ T8819] 8021q: adding VLAN 0 to HW filter on device bond0
[  625.589070][ T8819] 8021q: adding VLAN 0 to HW filter on device team0
[  626.259572][ T8976] bridge0: port 1(bridge_slave_0) entered blocking state
[  626.297033][ T8976] bridge0: port 1(bridge_slave_0) entered disabled state
[  626.343710][ T8976] bridge_slave_0: entered allmulticast mode
[  626.406105][ T8976] bridge_slave_0: entered promiscuous mode
[  626.560322][ T8976] bridge0: port 2(bridge_slave_1) entered blocking state
[  626.616773][ T8976] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.673580][ T8976] bridge_slave_1: entered allmulticast mode
[  626.725061][ T8976] bridge_slave_1: entered promiscuous mode
[  626.828047][ T8085] bridge0: port 1(bridge_slave_0) entered blocking state
[  626.835484][ T8085] bridge0: port 1(bridge_slave_0) entered forwarding state
[  627.600095][ T8976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  627.794763][ T8976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  628.134852][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state
[  628.142420][ T3292] bridge0: port 2(bridge_slave_1) entered forwarding state
[  628.282057][  T806] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  628.504126][  T806] usb 8-1: Using ep0 maxpacket: 32
[  628.604437][  T806] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  628.691961][  T806] usb 8-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40
[  628.764804][ T8976] team0: Port device team_slave_0 added
[  628.787991][  T806] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.841234][  T806] usb 8-1: Product: syz
[  628.878939][  T806] usb 8-1: Manufacturer: syz
[  628.932381][  T806] usb 8-1: SerialNumber: syz
[  628.965374][ T8976] team0: Port device team_slave_1 added
[  628.989135][ T9152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.972'.
[  629.372876][  T806] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input24
[  629.467234][ T9148] syzkaller0: entered promiscuous mode
[  629.471898][ T4916] bcm5974 8-1:1.0: could not read from device
[  629.543315][ T9148] syzkaller0: entered allmulticast mode
[  629.573591][ T4916] bcm5974 8-1:1.0: could not read from device
[  629.650456][  T806] usb 8-1: USB disconnect, device number 9
[  629.675903][ T4916] bcm5974 8-1:1.0: could not read from device
[  630.202980][ T1223] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  630.230455][ T5226] 8021q: adding VLAN 0 to HW filter on device eth19
[  630.308875][ T8976] batman_adv: batadv0: Adding interface: batadv_slave_0
[  630.361247][ T8976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  630.421153][ T1223] usb 1-1: device descriptor read/64, error -71
[  630.498140][ T8976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  630.702577][ T1223] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  630.714162][ T8976] batman_adv: batadv0: Adding interface: batadv_slave_1
[  630.755976][ T8976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  630.857645][ T8976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  630.911739][ T1223] usb 1-1: device descriptor read/64, error -71
[  631.025048][ T1223] usb usb1-port1: attempt power cycle
[  631.444458][ T1223] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  631.505053][ T1223] usb 1-1: device descriptor read/8, error -71
[  631.670819][ T8976] hsr_slave_0: entered promiscuous mode
[  631.720225][ T8976] hsr_slave_1: entered promiscuous mode
[  631.790018][ T8976] debugfs: 'hsr0' already exists in 'hsr'
[  631.802957][ T1223] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  631.826829][ T8976] Cannot create hsr debugfs directory
[  631.888525][ T1223] usb 1-1: device descriptor read/8, error -71
[  632.047030][ T1223] usb usb1-port1: unable to enumerate USB device
[  633.323796][ T1223] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  633.551915][ T1223] usb 8-1: device descriptor read/64, error -71
[  633.864279][ T1223] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  634.019506][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  634.037694][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  634.071690][ T1223] usb 8-1: device descriptor read/64, error -71
[  634.248117][ T1223] usb usb8-port1: attempt power cycle
[  634.674638][ T1223] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  634.790621][ T1223] usb 8-1: device descriptor read/8, error -71
[  635.095834][ T1223] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  635.189539][ T1223] usb 8-1: device descriptor read/8, error -71
[  635.348622][ T1223] usb usb8-port1: unable to enumerate USB device
[  635.975715][ T9189] bond4: entered promiscuous mode
[  637.266492][ T9198] syzkaller0: entered promiscuous mode
[  637.339687][ T9198] syzkaller0: entered allmulticast mode
[  637.494573][ T9205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.986'.
[  638.755892][ T8976] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  638.987317][ T8976] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  639.064066][ T8976] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  639.306245][ T8976] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  639.407689][ T8976] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  639.616561][ T8976] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  639.720625][ T8976] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  639.946192][ T8976] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  639.979197][ T5680] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  640.156418][ T5582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  640.169789][ T5582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  640.179964][ T5582] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  640.212040][ T5680] usb 1-1: device descriptor read/64, error -71
[  640.226788][ T5582] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  640.249827][ T5582] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  640.499504][ T5680] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  640.756741][ T5680] usb 1-1: device descriptor read/64, error -71
[  640.938550][ T5680] usb usb1-port1: attempt power cycle
[  641.931936][ T5680] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  642.366127][ T5582] Bluetooth: hci4: command tx timeout
[  642.393918][ T5680] usb 1-1: device descriptor read/8, error -71
[  642.640646][ T5680] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  643.173005][ T5680] usb 1-1: device descriptor read/8, error -71
[  643.368092][ T5680] usb usb1-port1: unable to enumerate USB device
[  643.663909][  T806] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  643.912064][  T806] usb 2-1: device descriptor read/64, error -71
[  644.117372][ T8976] 8021q: adding VLAN 0 to HW filter on device bond0
[  644.258893][  T806] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  644.411864][ T5582] Bluetooth: hci4: command tx timeout
[  644.511288][  T806] usb 2-1: device descriptor read/64, error -71
[  644.692603][  T806] usb usb2-port1: attempt power cycle
[  644.694578][ T8976] 8021q: adding VLAN 0 to HW filter on device team0
[  645.073628][ T6235] bridge0: port 1(bridge_slave_0) entered blocking state
[  645.081231][ T6235] bridge0: port 1(bridge_slave_0) entered forwarding state
[  645.192007][  T806] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  645.313348][  T806] usb 2-1: device descriptor read/8, error -71
[  645.421062][ T9245] netlink: 36 bytes leftover after parsing attributes in process `syz.0.996'.
[  645.448259][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state
[  645.455736][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state
[  645.641981][  T806] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  645.674117][ T5226] 8021q: adding VLAN 0 to HW filter on device eth20
[  645.745781][  T806] usb 2-1: device descriptor read/8, error -71
[  645.909805][  T806] usb usb2-port1: unable to enumerate USB device
[  646.164485][ T9252] syzkaller0: entered promiscuous mode
[  646.220181][ T9252] syzkaller0: entered allmulticast mode
[  646.491904][ T5582] Bluetooth: hci4: command tx timeout
[  648.582499][ T5582] Bluetooth: hci4: command tx timeout
[  650.138773][ T9280] netlink: 608 bytes leftover after parsing attributes in process `syz.1.1005'.
[  650.570111][ T9284] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1006'.
[  650.907994][ T1223] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  651.126106][ T1223] usb 1-1: device descriptor read/64, error -71
[  651.237200][ T6235] bridge_slave_1: left allmulticast mode
[  651.269436][ T6235] bridge_slave_1: left promiscuous mode
[  651.344740][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state
[  651.453019][ T1223] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  651.460931][ T6235] bridge_slave_0: left allmulticast mode
[  651.527055][ T6235] bridge_slave_0: left promiscuous mode
[  651.561341][ T6235] bridge0: port 1(bridge_slave_0) entered disabled state
[  651.681931][ T1223] usb 1-1: device descriptor read/64, error -71
[  651.823033][ T1223] usb usb1-port1: attempt power cycle
[  652.213755][ T1223] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  652.310181][ T1223] usb 1-1: device descriptor read/8, error -71
[  652.616499][ T1223] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  652.712210][ T1223] usb 1-1: device descriptor read/8, error -71
[  652.883482][ T1223] usb usb1-port1: unable to enumerate USB device
[  653.296369][ T6235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  653.429282][ T6235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  653.550702][ T6235] bond0 (unregistering): Released all slaves
[  653.909185][ T9306] syzkaller0: entered promiscuous mode
[  653.951846][ T9306] syzkaller0: entered allmulticast mode
[  654.303122][ T6235] hsr_slave_0: left promiscuous mode
[  654.354041][ T6235] hsr_slave_1: left promiscuous mode
[  654.394469][ T6235] batman_adv: batadv0: Removing interface: batadv_slave_0
[  654.456500][ T6235] batman_adv: batadv0: Removing interface: batadv_slave_1
[  656.449355][ T6235] team0 (unregistering): Port device team_slave_1 removed
[  656.571774][ T8978] Bluetooth: hci0: command 0x0c1a tx timeout
[  656.574219][ T6235] team0 (unregistering): Port device team_slave_0 removed
[  656.673020][ T1223] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  656.832469][ T1223] usb 1-1: device descriptor read/64, error -71
[  657.141943][ T1223] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  657.324157][ T1223] usb 1-1: device descriptor read/64, error -71
[  657.474247][ T1223] usb usb1-port1: attempt power cycle
[  657.862609][ T1223] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  657.893488][ T1223] usb 1-1: device descriptor read/8, error -71
[  658.072076][ T5680] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  658.161876][ T1223] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  658.276356][ T1223] usb 1-1: device descriptor read/8, error -71
[  658.302154][ T5680] usb 2-1: device descriptor read/64, error -71
[  658.452912][ T1223] usb usb1-port1: unable to enumerate USB device
[  658.592030][ T5680] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  658.810976][ T5680] usb 2-1: device descriptor read/64, error -71
[  658.975088][ T5680] usb usb2-port1: attempt power cycle
[  659.402211][ T5680] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  659.491078][ T5680] usb 2-1: device descriptor read/8, error -71
[  659.826688][ T5680] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  659.895173][ T5680] usb 2-1: device descriptor read/8, error -71
[  660.059522][ T5680] usb usb2-port1: unable to enumerate USB device
[  663.276446][ T9218] bridge0: port 1(bridge_slave_0) entered blocking state
[  663.363296][ T9218] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.487747][ T9218] bridge_slave_0: entered allmulticast mode
[  663.599220][ T9218] bridge_slave_0: entered promiscuous mode
[  663.751074][ T9218] bridge0: port 2(bridge_slave_1) entered blocking state
[  663.819942][ T9218] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.859221][ T9368] netlink: 608 bytes leftover after parsing attributes in process `syz.1.1027'.
[  663.894818][ T9218] bridge_slave_1: entered allmulticast mode
[  663.966714][ T8978] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  663.977229][ T9218] bridge_slave_1: entered promiscuous mode
[  663.984510][ T8978] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  664.008220][ T8978] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  664.045399][ T8978] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  664.068453][ T8978] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  664.190179][ T9218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  664.240479][ T9218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  665.154088][ T9218] team0: Port device team_slave_0 added
[  665.353140][ T9218] team0: Port device team_slave_1 added
[  666.034499][ T9218] batman_adv: batadv0: Adding interface: batadv_slave_0
[  666.102716][ T9218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  666.189098][ T8978] Bluetooth: hci5: command tx timeout
[  666.269989][ T9218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  666.482767][ T9218] batman_adv: batadv0: Adding interface: batadv_slave_1
[  666.498055][   T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  666.576255][ T9218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  666.794637][ T9218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  666.832061][   T10] usb 8-1: device descriptor read/64, error -71
[  667.048645][ T9388] syzkaller0: entered promiscuous mode
[  667.087273][ T9388] syzkaller0: entered allmulticast mode
[  667.152600][   T10] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  667.365198][   T10] usb 8-1: device descriptor read/64, error -71
[  667.519726][   T10] usb usb8-port1: attempt power cycle
[  667.943540][   T10] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  668.008763][   T10] usb 8-1: device descriptor read/8, error -71
[  668.091915][ T5680] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  668.152353][ T5226] 8021q: adding VLAN 0 to HW filter on device eth23
[  668.251853][ T8978] Bluetooth: hci5: command tx timeout
[  668.293299][ T5680] usb 2-1: device descriptor read/64, error -71
[  668.328130][   T10] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  668.345685][ T9218] hsr_slave_0: entered promiscuous mode
[  668.389833][   T10] usb 8-1: device descriptor read/8, error -71
[  668.422273][ T9218] hsr_slave_1: entered promiscuous mode
[  668.498181][ T9218] debugfs: 'hsr0' already exists in 'hsr'
[  668.540611][ T9218] Cannot create hsr debugfs directory
[  668.552661][   T10] usb usb8-port1: unable to enumerate USB device
[  668.638100][ T5680] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  668.829295][ T5680] usb 2-1: device descriptor read/64, error -71
[  669.002990][ T5680] usb usb2-port1: attempt power cycle
[  669.415858][ T5680] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  669.524706][ T5680] usb 2-1: device descriptor read/8, error -71
[  669.822463][ T5680] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  669.908105][ T5680] usb 2-1: device descriptor read/8, error -71
[  670.073762][ T5680] usb usb2-port1: unable to enumerate USB device
[  670.331971][ T8978] Bluetooth: hci5: command tx timeout
[  671.381231][ T9416] netlink: 608 bytes leftover after parsing attributes in process `syz.7.1037'.
[  672.346972][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1039'.
[  672.411963][ T8978] Bluetooth: hci5: command tx timeout
[  672.444650][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1039'.
[  672.766393][ T9426] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1040'.
[  674.422012][ T6236] bridge_slave_1: left allmulticast mode
[  674.456007][ T6236] bridge_slave_1: left promiscuous mode
[  674.502951][ T6236] bridge0: port 2(bridge_slave_1) entered disabled state
[  674.598820][ T6236] bridge_slave_0: left allmulticast mode
[  674.644475][ T6236] bridge_slave_0: left promiscuous mode
[  674.689693][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state
[  676.446044][ T6236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  676.555884][ T6236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  676.637005][ T6236] bond0 (unregistering): Released all slaves
[  677.065154][ T9437] syzkaller0: entered promiscuous mode
[  677.093603][ T9437] syzkaller0: entered allmulticast mode
[  677.556324][ T6236] hsr_slave_0: left promiscuous mode
[  677.580488][ T6236] hsr_slave_1: left promiscuous mode
[  677.591003][ T6236] batman_adv: batadv0: Removing interface: batadv_slave_0
[  677.614815][ T6236] batman_adv: batadv0: Removing interface: batadv_slave_1
[  678.642172][ T1223] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  678.844259][ T1223] usb 2-1: device descriptor read/64, error -71
[  679.124212][ T1223] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  679.303574][ T1223] usb 2-1: device descriptor read/64, error -71
[  679.434100][ T1223] usb usb2-port1: attempt power cycle
[  679.777435][ T6236] team0 (unregistering): Port device team_slave_1 removed
[  679.804700][ T1223] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  679.844680][ T1223] usb 2-1: device descriptor read/8, error -71
[  679.905608][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'.
[  679.933847][ T6236] team0 (unregistering): Port device team_slave_0 removed
[  679.953517][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'.
[  680.102600][ T1223] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  680.174701][ T1223] usb 2-1: device descriptor read/8, error -71
[  680.330591][ T1223] usb usb2-port1: unable to enumerate USB device
[  680.696990][ T9466] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1050'.
[  680.889793][ T5226] 8021q: adding VLAN 0 to HW filter on device eth24
[  682.129004][ T9218] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  682.294459][ T9218] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  682.629974][ T9218] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  682.773352][ T9218] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  682.842164][ T9218] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  683.033165][ T9218] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  683.438374][ T9218] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  683.583705][ T9218] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  683.658901][ T9476] syzkaller0: entered promiscuous mode
[  683.704353][ T9476] syzkaller0: entered allmulticast mode
[  685.553483][   T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  685.598678][ T9371] bridge0: port 1(bridge_slave_0) entered blocking state
[  685.651129][ T9371] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.702562][ T9371] bridge_slave_0: entered allmulticast mode
[  685.741059][ T9371] bridge_slave_0: entered promiscuous mode
[  685.782381][   T10] usb 2-1: Using ep0 maxpacket: 32
[  685.820476][   T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  685.869754][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  685.901401][ T9371] bridge0: port 2(bridge_slave_1) entered blocking state
[  685.929536][   T10] usb 2-1: config 0 has no interface number 0
[  685.944062][ T9371] bridge0: port 2(bridge_slave_1) entered disabled state
[  685.965420][   T10] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  685.989534][ T9371] bridge_slave_1: entered allmulticast mode
[  686.015778][ T9371] bridge_slave_1: entered promiscuous mode
[  686.048961][   T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  686.086876][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.139463][   T10] usb 2-1: Product: syz
[  686.168568][   T10] usb 2-1: Manufacturer: syz
[  686.192246][   T10] usb 2-1: SerialNumber: syz
[  686.252923][   T10] usb 2-1: config 0 descriptor??
[  686.319076][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1058'.
[  686.323447][   T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  686.409979][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1058'.
[  686.486943][   T10] usb 2-1: qt2_setup_urbs - submit read urb failed -8
[  686.517136][ T9371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  686.531324][   T10] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8
[  686.637517][ T9371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  686.699543][   T10] usb 2-1: USB disconnect, device number 54
[  687.247286][ T9515] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1059'.
[  687.296153][ T9371] team0: Port device team_slave_0 added
[  687.403935][ T9371] team0: Port device team_slave_1 added
[  687.982648][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_0
[  688.042687][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  688.150637][ T9371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  688.213596][ T5226] 8021q: adding VLAN 0 to HW filter on device eth25
[  688.250091][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_1
[  688.301345][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  688.402171][   T30] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  688.450901][ T9371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  688.561283][ T9218] 8021q: adding VLAN 0 to HW filter on device bond0
[  688.608256][   T30] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  688.647468][   T30] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  688.680084][   T30] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  688.750773][   T30] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  688.778640][   T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.799186][   T30] usb 1-1: Product: syz
[  688.827553][   T30] usb 1-1: Manufacturer: syz
[  688.847795][   T30] usb 1-1: SerialNumber: syz
[  688.880788][   T30] usb 1-1: config 0 descriptor??
[  688.915576][ T9520] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  688.951298][ T9520] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  689.033675][   T30] usb 1-1: ucan: probing device on interface #0
[  689.268792][   T30] usb 1-1: ucan: could not read protocol version, ret=0
[  689.292872][   T30] usb 1-1: ucan: probe failed; try to update the device firmware
[  689.609038][ T9371] hsr_slave_0: entered promiscuous mode
[  689.685854][ T9371] hsr_slave_1: entered promiscuous mode
[  689.724856][ T9371] debugfs: 'hsr0' already exists in 'hsr'
[  689.744819][ T9371] Cannot create hsr debugfs directory
[  689.859046][ T9218] 8021q: adding VLAN 0 to HW filter on device team0
[  690.362654][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  690.370422][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  690.507236][ T9528] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1064'.
[  690.604332][ T9532] syzkaller0: entered promiscuous mode
[  690.617465][ T9532] syzkaller0: entered allmulticast mode
[  691.038404][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  691.045849][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  691.390821][   T10] usb 1-1: USB disconnect, device number 68
[  691.925904][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'.
[  692.009054][ T9542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1067'.
[  692.602535][ T9490] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  692.824269][ T9490] usb 2-1: Using ep0 maxpacket: 32
[  692.906713][ T9490] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  692.918373][ T9551] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1069'.
[  692.969836][ T9490] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  693.019823][ T9490] usb 2-1: config 0 has no interface number 0
[  693.060111][ T9490] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  693.185894][ T9490] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  693.231406][ T9490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.276841][ T9490] usb 2-1: Product: syz
[  693.304133][ T9490] usb 2-1: Manufacturer: syz
[  693.354763][ T9490] usb 2-1: SerialNumber: syz
[  693.447203][ T9490] usb 2-1: config 0 descriptor??
[  693.545673][ T9490] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  693.758125][ T9490] usb 2-1: qt2_setup_urbs - submit read urb failed -8
[  693.840200][ T9490] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8
[  693.999367][ T9490] usb 2-1: USB disconnect, device number 55
[  695.180994][ T9371] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  695.335271][ T9371] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  695.388369][ T9371] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  695.469737][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  695.478243][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  695.576580][ T9371] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  695.708484][ T9371] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  695.840382][ T9371] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  695.910139][ T9371] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  695.991667][ T5677] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  695.999838][ T9578] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1074'.
[  696.008672][ T9371] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  696.033274][ T9574] syzkaller0: entered promiscuous mode
[  696.061170][ T9574] syzkaller0: entered allmulticast mode
[  696.233776][ T5677] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  696.274867][ T5677] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  696.320284][ T5677] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  696.409330][ T5677] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  696.456213][ T5677] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.513755][ T5677] usb 8-1: Product: syz
[  696.533379][ T5677] usb 8-1: Manufacturer: syz
[  696.546552][ T5677] usb 8-1: SerialNumber: syz
[  696.597015][ T5677] usb 8-1: config 0 descriptor??
[  696.631307][ T9581] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  696.686122][ T9581] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  696.778312][ T5677] usb 8-1: ucan: probing device on interface #0
[  697.004128][ T5677] usb 8-1: ucan: could not read protocol version, ret=0
[  697.043957][ T5677] usb 8-1: ucan: probe failed; try to update the device firmware
[  697.739834][ T9371] 8021q: adding VLAN 0 to HW filter on device bond0
[  698.065650][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1077'.
[  698.072685][ T9371] 8021q: adding VLAN 0 to HW filter on device team0
[  698.138566][ T9597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'.
[  698.194199][  T156] bridge0: port 1(bridge_slave_0) entered blocking state
[  698.201815][  T156] bridge0: port 1(bridge_slave_0) entered forwarding state
[  698.406857][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state
[  698.414484][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state
[  698.986002][ T5680] usb 8-1: USB disconnect, device number 18
[  699.534033][ T5582] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  699.544395][ T5582] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  699.562142][ T5582] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  699.589790][ T5582] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  699.603718][ T5582] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  699.735737][ T9608] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1079'.
[  701.590379][ T5677] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  701.692611][ T5582] Bluetooth: hci1: command tx timeout
[  701.816716][ T5677] usb 2-1: Using ep0 maxpacket: 32
[  701.877379][ T5677] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  701.948164][ T5677] usb 2-1: config 0 has no interface number 0
[  701.988253][ T5677] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  702.100406][ T5677] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  702.167830][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.226495][ T5677] usb 2-1: Product: syz
[  702.250919][ T5677] usb 2-1: Manufacturer: syz
[  702.276459][ T5677] usb 2-1: SerialNumber: syz
[  702.335498][ T5677] usb 2-1: config 0 descriptor??
[  702.411571][ T5677] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  702.608117][ T9640] syzkaller0: entered promiscuous mode
[  702.622332][ T5677] usb 2-1: qt2_setup_urbs - submit read urb failed -8
[  702.645715][ T9640] syzkaller0: entered allmulticast mode
[  702.669958][ T5677] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8
[  702.692905][ T9642] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1084'.
[  702.863683][ T5677] usb 2-1: USB disconnect, device number 56
[  703.610740][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1086'.
[  703.655094][ T9654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1086'.
[  703.774128][ T5582] Bluetooth: hci1: command tx timeout
[  704.021054][ T6234] bridge_slave_1: left allmulticast mode
[  704.050184][ T6234] bridge_slave_1: left promiscuous mode
[  704.073072][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state
[  704.159390][ T6234] bridge_slave_0: left allmulticast mode
[  704.209177][ T6234] bridge_slave_0: left promiscuous mode
[  704.230124][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state
[  704.251296][ T9661] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1088'.
[  704.261709][ T5680] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  704.439628][ T5680] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  704.498221][ T5680] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  704.559550][ T5680] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  704.611037][ T5680] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  704.636013][ T5680] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.647731][ T5680] usb 8-1: Product: syz
[  704.654652][ T5680] usb 8-1: Manufacturer: syz
[  704.679564][ T5680] usb 8-1: SerialNumber: syz
[  704.729811][ T5680] usb 8-1: config 0 descriptor??
[  704.751000][ T9657] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  704.771238][ T9657] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  704.806183][ T5680] usb 8-1: ucan: probing device on interface #0
[  705.067281][ T5680] usb 8-1: ucan: device protocol version 0 is not supported
[  705.099227][ T5680] usb 8-1: ucan: probe failed; try to update the device firmware
[  705.209263][ T6234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  705.256135][ T6234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  705.316553][ T6234] bond0 (unregistering): Released all slaves
[  705.422503][ T9371] 8021q: adding VLAN 0 to HW filter on device batadv0
[  705.851740][ T5582] Bluetooth: hci1: command tx timeout
[  705.917738][ T6234] hsr_slave_0: left promiscuous mode
[  705.963294][ T6234] hsr_slave_1: left promiscuous mode
[  706.027169][ T6234] batman_adv: batadv0: Removing interface: batadv_slave_0
[  706.118939][ T6234] batman_adv: batadv0: Removing interface: batadv_slave_1
[  707.248855][ T5677] usb 8-1: USB disconnect, device number 19
[  707.931765][ T5582] Bluetooth: hci1: command tx timeout
[  708.042605][ T6234] team0 (unregistering): Port device team_slave_1 removed
[  708.099847][ T6234] team0 (unregistering): Port device team_slave_0 removed
[  708.642638][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1097'.
[  708.697280][ T9704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1097'.
[  709.164028][ T9709] ALSA: mixer_oss: invalid OSS volume ''
[  709.170291][ T9709] ALSA: mixer_oss: invalid OSS volume '^FNMt&žI€¶'
[  709.177270][ T9709] ALSA: mixer_oss: invalid OSS volume 'Á§&2²Ñ N+°K,Õi421ÉÞj€ž§)b!'
[  709.191504][ T9709] ALSA: mixer_oss: invalid OSS volume 'üÿ�®¤¡83èìíý'
[  709.726656][ T9714] binder: 9713:9714 ioctl c0306201 0 returned -14
[  709.956275][ T5677] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  710.216739][ T5677] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  710.267497][ T5677] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  710.310854][ T5677] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  710.360590][ T5677] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  710.391093][ T5677] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  710.457202][ T5677] usb 8-1: config 0 descriptor??
[  711.023394][ T5677] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  711.109397][ T9736] netlink: 560 bytes leftover after parsing attributes in process `syz.0.1103'.
[  711.901990][ T9371] veth0_vlan: entered promiscuous mode
[  712.172669][ T9371] veth1_vlan: entered promiscuous mode
[  712.272861][    C0] plantronics 0003:047F:FFFF.000E: usb_submit_urb(ctrl) failed: -1
[  712.653034][ T9371] veth0_macvtap: entered promiscuous mode
[  712.753203][ T9371] veth1_macvtap: entered promiscuous mode
[  713.104708][ T9734] usb 8-1: USB disconnect, device number 20
[  713.243217][ T9603] bridge0: port 1(bridge_slave_0) entered blocking state
[  713.285763][ T9603] bridge0: port 1(bridge_slave_0) entered disabled state
[  713.320432][ T9603] bridge_slave_0: entered allmulticast mode
[  713.387024][ T9603] bridge_slave_0: entered promiscuous mode
[  713.449948][ T9603] bridge0: port 2(bridge_slave_1) entered blocking state
[  713.523370][ T9603] bridge0: port 2(bridge_slave_1) entered disabled state
[  713.554673][ T9603] bridge_slave_1: entered allmulticast mode
[  713.578083][ T9603] bridge_slave_1: entered promiscuous mode
[  713.632978][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1108'.
[  713.700324][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1108'.
[  713.986658][ T9603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  714.088141][ T9603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  714.127964][ T9734] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  714.344745][ T9734] usb 2-1: Using ep0 maxpacket: 16
[  714.420350][ T9734] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  714.457214][ T9771] binder: 9769:9771 ioctl c0306201 0 returned -14
[  714.474869][ T9734] usb 2-1: config 0 has no interface number 0
[  714.499663][ T9734] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  714.545786][ T9734] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  714.621272][ T9734] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  714.650400][ T9734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.679899][ T9734] usb 2-1: Product: syz
[  714.685489][ T9734] usb 2-1: Manufacturer: syz
[  714.701126][ T9603] team0: Port device team_slave_0 added
[  714.708135][ T9734] usb 2-1: SerialNumber: syz
[  714.734674][ T9734] usb 2-1: config 0 descriptor??
[  714.786644][ T9765] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  714.823452][ T9765] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  714.838442][ T9603] team0: Port device team_slave_1 added
[  715.032191][ T9371] batman_adv: batadv0: Interface activated: batadv_slave_0
[  715.088204][ T9765] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  715.108964][ T9765] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  715.263761][ T9603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  715.294344][ T9603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  715.344518][ T9603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  715.378649][ T9603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  715.386414][ T9603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  715.413522][ T9603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  715.513804][ T9371] batman_adv: batadv0: Interface activated: batadv_slave_1
[  716.152516][ T9603] hsr_slave_0: entered promiscuous mode
[  716.198286][ T9603] hsr_slave_1: entered promiscuous mode
[  716.242320][ T9603] debugfs: 'hsr0' already exists in 'hsr'
[  716.287272][ T9603] Cannot create hsr debugfs directory
[  716.370162][ T1039] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  716.447095][ T8085] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  716.505778][ T8085] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  716.563874][ T8085] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  716.804122][ T9734] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  716.867470][ T9734] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  716.913432][ T9734] asix 2-1:0.34: probe with driver asix failed with error -71
[  717.004790][ T9734] usb 2-1: USB disconnect, device number 57
[  719.577639][ T9824] binder: 9822:9824 ioctl c0306201 0 returned -14
[  720.100691][ T9603] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  720.227359][ T9603] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  720.277651][ T9603] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  720.327650][ T9603] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  720.360817][ T9603] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  720.456671][ T9603] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  720.495714][ T9603] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  720.616973][ T9603] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  720.745408][ T5677] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  721.015542][ T5677] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  721.075723][ T5677] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  721.124534][ T5677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.206996][ T5677] usb 1-1: config 0 descriptor??
[  721.508986][ T1223] usb 1-1: USB disconnect, device number 69
[  722.721239][ T9603] 8021q: adding VLAN 0 to HW filter on device bond0
[  723.118269][ T9603] 8021q: adding VLAN 0 to HW filter on device team0
[  723.298476][ T6235] bridge0: port 1(bridge_slave_0) entered blocking state
[  723.306102][ T6235] bridge0: port 1(bridge_slave_0) entered forwarding state
[  723.438453][ T6235] bridge0: port 2(bridge_slave_1) entered blocking state
[  723.446109][ T6235] bridge0: port 2(bridge_slave_1) entered forwarding state
[  723.748512][ T8978] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  723.760773][ T8978] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  723.778031][ T8978] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  723.811070][ T8978] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  723.835500][ T8978] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  725.933158][ T8978] Bluetooth: hci4: command tx timeout
[  726.153363][ T5686] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  726.418791][ T5686] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  726.479467][ T5686] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  726.557674][ T5686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.657769][ T5686] usb 2-1: config 0 descriptor??
[  726.979778][ T5686] usb 2-1: USB disconnect, device number 58
[  727.805520][ T3292] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  728.014459][ T8978] Bluetooth: hci4: command tx timeout
[  728.198955][ T3292] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  728.522603][ T3292] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  728.815503][ T3292] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  730.093096][ T8978] Bluetooth: hci4: command tx timeout
[  730.604092][ T3292] bridge_slave_1: left allmulticast mode
[  730.654781][ T3292] bridge_slave_1: left promiscuous mode
[  730.684272][ T3292] bridge0: port 2(bridge_slave_1) entered disabled state
[  730.724850][ T3292] bridge_slave_0: left allmulticast mode
[  730.765360][ T3292] bridge_slave_0: left promiscuous mode
[  730.792643][ T3292] bridge0: port 1(bridge_slave_0) entered disabled state
[  731.721786][ T8326] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  731.906460][ T8326] usb 8-1: too many configurations: 36, using maximum allowed: 8
[  731.926004][ T3292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  731.991389][ T8326] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  732.005126][ T8326] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  732.006717][ T3292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  732.026265][ T8326] usb 8-1: Product: syz
[  732.030690][ T8326] usb 8-1: Manufacturer: syz
[  732.036952][ T8326] usb 8-1: SerialNumber: syz
[  732.065987][ T3292] bond0 (unregistering): Released all slaves
[  732.083669][ T8326] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  732.172397][ T8978] Bluetooth: hci4: command tx timeout
[  732.301174][ T5203] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  732.477707][ T9603] 8021q: adding VLAN 0 to HW filter on device batadv0
[  732.706831][ T3292] hsr_slave_0: left promiscuous mode
[  732.781308][ T3292] hsr_slave_1: left promiscuous mode
[  732.884618][ T3292] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  733.107942][ T3292] batman_adv: batadv0: Removing interface: batadv_slave_0
[  733.129329][ T8326] usb 8-1: USB disconnect, device number 21
[  733.185015][ T3292] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  733.261308][ T3292] batman_adv: batadv0: Removing interface: batadv_slave_1
[  733.336329][ T3292] veth1_macvtap: left promiscuous mode
[  733.368846][ T3292] veth0_macvtap: left promiscuous mode
[  733.384075][ T3292] veth1_vlan: left promiscuous mode
[  733.410455][ T3292] veth0_vlan: left promiscuous mode
[  733.484229][ T9927] comedi comedi3: comedi_test: 7 microvolt, 2046 microsecond waveform attached
[  733.532174][ T5203] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[  733.568819][ T5203] ath9k_htc: Failed to initialize the device
[  733.620189][ T8326] usb 8-1: ath9k_htc: USB layer deinitialized
[  735.055628][ T8978] Bluetooth: hci3: unexpected event for opcode 0x042f
[  736.108625][ T3292] team0 (unregistering): Port device team_slave_1 removed
[  736.250918][ T3292] team0 (unregistering): Port device team_slave_0 removed
[  740.408804][ T9603] veth0_vlan: entered promiscuous mode
[  740.640444][ T9603] veth1_vlan: entered promiscuous mode
[  741.378234][ T9852] bridge0: port 1(bridge_slave_0) entered blocking state
[  741.404198][ T9852] bridge0: port 1(bridge_slave_0) entered disabled state
[  741.430377][ T9852] bridge_slave_0: entered allmulticast mode
[  741.482736][ T9852] bridge_slave_0: entered promiscuous mode
[  741.628289][ T9852] bridge0: port 2(bridge_slave_1) entered blocking state
[  741.669039][ T9852] bridge0: port 2(bridge_slave_1) entered disabled state
[  741.711178][ T9852] bridge_slave_1: entered allmulticast mode
[  741.753752][ T9852] bridge_slave_1: entered promiscuous mode
[  742.218930][ T9603] veth0_macvtap: entered promiscuous mode
[  742.371028][ T9852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  742.480004][ T9852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  742.946809][ T9603] veth1_macvtap: entered promiscuous mode
[  743.069180][ T9852] team0: Port device team_slave_0 added
[  743.214628][ T9852] team0: Port device team_slave_1 added
[  743.672674][ T9852] batman_adv: batadv0: Adding interface: batadv_slave_0
[  743.702111][   T30] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  743.718247][ T9852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  743.827903][ T9852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  743.911754][   T30] usb 1-1: Using ep0 maxpacket: 16
[  743.953902][ T9852] batman_adv: batadv0: Adding interface: batadv_slave_1
[  743.974889][ T9852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  743.980271][   T30] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  744.018020][ T9852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  744.107377][   T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.148981][ T5226] 8021q: adding VLAN 0 to HW filter on device eth24
[  744.178517][   T30] usb 1-1: Product: syz
[  744.225128][   T30] usb 1-1: Manufacturer: syz
[  744.253524][   T30] usb 1-1: SerialNumber: syz
[  744.342273][   T30] r8152-cfgselector 1-1: Unknown version 0x0000
[  744.386787][   T30] r8152-cfgselector 1-1: config 0 descriptor??
[  744.853924][ T9852] hsr_slave_0: entered promiscuous mode
[  744.866712][T10033] input: syz1 as /devices/virtual/input/input26
[  744.952775][ T5677] r8152-cfgselector 1-1: USB disconnect, device number 70
[  744.971704][ T9852] hsr_slave_1: entered promiscuous mode
[  745.068405][ T9852] debugfs: 'hsr0' already exists in 'hsr'
[  745.090178][ T9852] Cannot create hsr debugfs directory
[  745.172851][ T9603] batman_adv: batadv0: Interface activated: batadv_slave_0
[  745.470514][ T9603] batman_adv: batadv0: Interface activated: batadv_slave_1
[  746.290869][ T1039] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  746.328413][ T1039] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  746.373460][ T1039] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  746.698214][ T1039] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  746.822645][   T30] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  747.052235][   T30] usb 8-1: Using ep0 maxpacket: 32
[  747.137376][   T30] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1
[  747.170081][   T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7
[  747.225197][   T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024
[  747.282521][   T30] usb 8-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  747.326019][   T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  747.362855][   T30] usb 8-1: Product: syz
[  747.392934][   T30] usb 8-1: Manufacturer: syz
[  747.437414][   T30] usb 8-1: SerialNumber: syz
[  747.524075][   T30] usb 8-1: config 0 descriptor??
[  747.627607][   T30] usb 8-1: no audio or video endpoints found
[  747.833008][   T30] usb 8-1: USB disconnect, device number 22
[  748.908887][ T5677] usb 2-1: new full-speed USB device number 59 using dummy_hcd
[  749.167973][ T5677] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  749.211248][ T5677] usb 2-1: config 0 has no interface number 0
[  749.257302][ T5677] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  749.349352][ T5677] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  749.412841][ T5677] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  749.533498][ T5677] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  749.586026][ T5677] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  749.642239][ T5677] usb 2-1: Product: syz
[  749.680675][ T5677] usb 2-1: SerialNumber: syz
[  749.767587][ T5677] usb 2-1: config 0 descriptor??
[  749.896337][ T5677] cm109 2-1:0.8: invalid payload size 0, expected 4
[  749.979453][ T5677] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input27
[  749.992259][ T9852] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  750.179749][ T9852] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  750.210912][ T9852] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  750.335050][ T9852] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  750.394277][ T9852] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  750.563060][ T9852] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  750.608203][ T9852] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  750.729323][ T9852] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  752.471814][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  752.479579][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  752.486929][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  752.494426][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  752.503868][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  752.512176][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  752.519511][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  752.526921][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  752.534224][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  752.541626][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  752.609300][ T5677] usb 2-1: USB disconnect, device number 59
[  752.609516][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  752.657755][ T5677] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  753.163555][ T9852] 8021q: adding VLAN 0 to HW filter on device bond0
[  753.502079][ T9852] 8021q: adding VLAN 0 to HW filter on device team0
[  753.607589][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  753.615025][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  753.888453][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  753.896270][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  756.913152][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  756.925874][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  758.915836][ T9921] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  759.139428][ T9921] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  759.189376][ T9921] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  759.239372][ T9921] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  759.302348][ T9921] usb 1-1: config 220 has no interface number 2
[  759.331810][ T9921] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  759.432594][ T9921] usb 1-1: config 220 interface 0 has no altsetting 0
[  759.470844][ T9921] usb 1-1: config 220 interface 76 has no altsetting 0
[  759.508195][ T9921] usb 1-1: config 220 interface 1 has no altsetting 0
[  759.571079][ T9921] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  759.620584][ T9921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.623155][ T5686] usb 2-1: new full-speed USB device number 60 using dummy_hcd
[  759.684078][ T9921] usb 1-1: Product: syz
[  759.707355][ T9921] usb 1-1: Manufacturer: syz
[  759.735764][ T9921] usb 1-1: SerialNumber: syz
[  759.891322][ T5686] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  759.955747][ T5686] usb 2-1: config 0 has no interface number 0
[  759.996314][ T5686] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  760.095682][ T5686] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  760.112777][ T9921] usb 1-1: selecting invalid altsetting 0
[  760.140086][ T5686] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  760.159090][ T9921] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  760.191372][ T5686] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  760.221732][ T5686] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  760.236656][ T9921] uvcvideo 1-1:220.0: No valid video chain found.
[  760.241665][ T5686] usb 2-1: Product: syz
[  760.249204][ T5582] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  760.258847][ T5686] usb 2-1: SerialNumber: syz
[  760.261330][ T5582] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  760.275545][ T5582] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  760.293288][ T5582] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  760.305492][ T5582] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  760.339751][ T9852] 8021q: adding VLAN 0 to HW filter on device batadv0
[  760.363572][ T5686] usb 2-1: config 0 descriptor??
[  760.422135][ T5686] cm109 2-1:0.8: invalid payload size 0, expected 4
[  760.435279][ T9921] usb 1-1: selecting invalid altsetting 0
[  760.447943][ T5686] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input28
[  760.479377][ T9921] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  760.638710][ T9921] usb 1-1: USB disconnect, device number 71
[  761.601826][ T9921] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  761.792021][ T9921] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  761.792153][ T9921] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  761.792279][ T9921] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  761.792509][ T9921] usb 8-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  761.792653][ T9921] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  761.831653][ T9921] usb 8-1: config 0 descriptor??
[  762.185938][ T9921] usb 8-1: USB disconnect, device number 23
[  762.411813][ T5582] Bluetooth: hci5: command tx timeout
[  763.428511][   T56] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  763.440117][    C0] cm109_urb_ctl_callback: 179 callbacks suppressed
[  763.440220][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  763.452628][   T30] usb 2-1: USB disconnect, device number 60
[  763.453886][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  763.610733][   T30] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  763.767938][   T56] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.135454][   T56] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.438611][   T56] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.491798][ T5582] Bluetooth: hci5: command tx timeout
[  764.598757][T10184] binder_alloc: 10181: binder_alloc_buf, no vma
[  767.316675][ T5582] Bluetooth: hci5: command tx timeout
[  767.343562][T10182] binder: 10181:10182 ioctl c0306201 0 returned -14
[  769.386170][ T5582] Bluetooth: hci5: command tx timeout
[  771.630633][   T56] bridge_slave_1: left allmulticast mode
[  771.664255][   T56] bridge_slave_1: left promiscuous mode
[  771.698461][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[  771.783397][   T56] bridge_slave_0: left allmulticast mode
[  771.816245][   T56] bridge_slave_0: left promiscuous mode
[  771.862899][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[  772.455295][   T10] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  772.704547][   T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  772.752501][T10210] mmap: syz.0.1195 (10210) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  772.761915][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  772.765208][ T9921] usb 2-1: new full-speed USB device number 61 using dummy_hcd
[  772.800645][   T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  772.841826][   T10] usb 8-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  772.886502][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  772.943460][   T10] usb 8-1: config 0 descriptor??
[  773.018009][ T9921] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  773.049716][ T9921] usb 2-1: config 0 has no interface number 0
[  773.082849][ T9921] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  773.127949][ T9921] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  773.161723][ T9921] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  773.179369][ T9921] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  773.189798][ T9921] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  773.205950][ T9921] usb 2-1: Product: syz
[  773.218975][ T9921] usb 2-1: SerialNumber: syz
[  773.246312][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  773.250264][ T9921] usb 2-1: config 0 descriptor??
[  773.269263][   T10] usb 8-1: USB disconnect, device number 24
[  773.366940][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  773.368511][ T9921] cm109 2-1:0.8: invalid payload size 0, expected 4
[  773.410319][   T56] bond0 (unregistering): Released all slaves
[  773.424267][ T9921] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input29
[  773.774073][ T9852] veth0_vlan: entered promiscuous mode
[  774.556339][   T56] hsr_slave_0: left promiscuous mode
[  774.567272][   T56] hsr_slave_1: left promiscuous mode
[  774.580463][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  774.584447][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[  774.592882][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  774.592968][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[  774.670463][   T56] veth1_macvtap: left promiscuous mode
[  774.670607][   T56] veth0_macvtap: left promiscuous mode
[  774.670977][   T56] veth1_vlan: left promiscuous mode
[  774.678562][   T56] veth0_vlan: left promiscuous mode
[  775.089586][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  775.092864][   T10] usb 2-1: USB disconnect, device number 61
[  775.096739][    C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  775.178269][   T10] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  776.860356][   T56] team0 (unregistering): Port device team_slave_1 removed
[  776.976202][   T56] team0 (unregistering): Port device team_slave_0 removed
[  777.294937][   T10] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  777.503915][   T10] usb 8-1: too many configurations: 36, using maximum allowed: 8
[  777.624113][   T10] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  777.658643][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.692437][   T10] usb 8-1: Product: syz
[  777.711407][   T10] usb 8-1: Manufacturer: syz
[  777.728150][   T10] usb 8-1: SerialNumber: syz
[  777.828203][   T10] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  777.962430][ T5677] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  778.024896][ T9852] veth1_vlan: entered promiscuous mode
[  779.137451][ T5677] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[  779.148982][   T30] usb 8-1: USB disconnect, device number 25
[  779.183028][ T5677] ath9k_htc: Failed to initialize the device
[  779.295219][   T30] usb 8-1: ath9k_htc: USB layer deinitialized
[  779.588672][ T9852] veth0_macvtap: entered promiscuous mode
[  779.685046][ T9852] veth1_macvtap: entered promiscuous mode
[  780.069407][ T9852] batman_adv: batadv0: Interface activated: batadv_slave_0
[  780.296268][ T9852] batman_adv: batadv0: Interface activated: batadv_slave_1
[  780.921143][   T81] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  780.990003][   T81] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  781.041257][   T81] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  781.087874][   T81] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  781.362738][ T9921] usb 1-1: new full-speed USB device number 72 using dummy_hcd
[  781.579209][ T9921] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  781.613856][ T9921] usb 1-1: config 0 has no interface number 0
[  781.646102][ T9921] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  781.700422][ T9921] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  781.733670][ T9921] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  781.793698][ T9921] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  781.828665][ T9921] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  781.866645][ T9921] usb 1-1: Product: syz
[  781.896349][ T9921] usb 1-1: SerialNumber: syz
[  781.940200][ T9921] usb 1-1: config 0 descriptor??
[  782.029576][ T9921] cm109 1-1:0.8: invalid payload size 0, expected 4
[  782.074432][ T9921] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input30
[  782.525058][T10149] bridge0: port 1(bridge_slave_0) entered blocking state
[  782.528293][T10149] bridge0: port 1(bridge_slave_0) entered disabled state
[  782.528831][T10149] bridge_slave_0: entered allmulticast mode
[  782.580338][T10149] bridge_slave_0: entered promiscuous mode
[  782.689222][T10149] bridge0: port 2(bridge_slave_1) entered blocking state
[  782.689572][T10149] bridge0: port 2(bridge_slave_1) entered disabled state
[  782.690318][T10149] bridge_slave_1: entered allmulticast mode
[  782.737441][T10149] bridge_slave_1: entered promiscuous mode
[  783.613150][T10149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  783.727616][T10149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  784.345871][T10149] team0: Port device team_slave_0 added
[  784.421095][T10149] team0: Port device team_slave_1 added
[  784.700296][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  784.701992][ T5686] usb 1-1: USB disconnect, device number 72
[  784.707469][    C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  784.909678][ T5686] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  784.952775][T10149] batman_adv: batadv0: Adding interface: batadv_slave_0
[  784.996736][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  785.052612][ T8978] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  785.071377][ T8978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  785.084252][ T8978] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  785.097642][ T8978] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  785.111110][ T8978] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  785.148735][T10149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  785.171933][T10149] batman_adv: batadv0: Adding interface: batadv_slave_1
[  785.179118][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  785.206133][T10149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  785.536676][ T5226] 8021q: adding VLAN 0 to HW filter on device eth23
[  785.615985][T10149] hsr_slave_0: entered promiscuous mode
[  785.639612][T10149] hsr_slave_1: entered promiscuous mode
[  785.714349][T10149] debugfs: 'hsr0' already exists in 'hsr'
[  785.733699][T10149] Cannot create hsr debugfs directory
[  787.216359][ T8978] Bluetooth: hci1: command tx timeout
[  787.820444][  T156] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  788.062220][  T156] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  788.291116][  T156] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  788.499015][  T156] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  789.162448][ T9921] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  789.291953][ T8978] Bluetooth: hci1: command tx timeout
[  789.342377][ T9921] usb 1-1: Using ep0 maxpacket: 8
[  789.411775][ T9921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  789.456751][ T9921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  789.511894][ T9921] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  789.546088][ T9921] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x7E, changing to 0xE
[  789.601232][ T9921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  789.646137][ T9921] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0
[  789.682337][T10149] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  789.696640][ T9921] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  789.731952][ T9921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  789.765749][T10149] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  789.796213][ T9921] usb 1-1: config 0 descriptor??
[  789.940336][T10149] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  790.034733][T10149] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  790.059354][T10149] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  790.104369][T10149] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  790.196834][T10149] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  790.283516][T10149] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  790.424478][  T156] bridge_slave_1: left allmulticast mode
[  790.448594][  T156] bridge_slave_1: left promiscuous mode
[  790.466577][  T156] bridge0: port 2(bridge_slave_1) entered disabled state
[  790.510661][  T156] bridge_slave_0: left allmulticast mode
[  790.517157][  T156] bridge_slave_0: left promiscuous mode
[  790.529860][  T156] bridge0: port 1(bridge_slave_0) entered disabled state
[  791.382351][ T8978] Bluetooth: hci1: command tx timeout
[  791.936510][  T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  792.009990][  T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  792.039173][ T9618] usb 1-1: USB disconnect, device number 73
[  792.082760][  T156] bond0 (unregistering): Released all slaves
[  792.141986][  T806] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  792.312812][  T806] usb 8-1: Using ep0 maxpacket: 32
[  792.368508][  T806] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  792.414391][  T806] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  792.478365][  T806] usb 8-1: config 0 descriptor??
[  792.592075][  T806] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  792.693037][  T156] hsr_slave_0: left promiscuous mode
[  792.759008][  T156] hsr_slave_1: left promiscuous mode
[  792.790644][  T806] gspca_vc032x: reg_r err -32
[  792.797390][  T156] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  792.818057][  T806] gspca_vc032x: I2c Bus Busy Wait 00
[  792.832063][  T156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  792.839557][  T806] gspca_vc032x: I2c Bus Busy Wait 00
[  792.877154][  T806] gspca_vc032x: I2c Bus Busy Wait 00
[  792.896338][  T156] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  792.896929][  T806] gspca_vc032x: I2c Bus Busy Wait 00
[  792.921705][  T156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  792.949845][  T806] gspca_vc032x: I2c Bus Busy Wait 00
[  792.960538][  T806] gspca_vc032x: I2c Bus Busy Wait 00
[  792.976329][  T806] gspca_vc032x: I2c Bus Busy Wait 00
[  792.994110][  T806] gspca_vc032x: I2c Bus Busy Wait 00
[  793.011147][  T806] gspca_vc032x: I2c Bus Busy Wait 00
[  793.018748][  T806] gspca_vc032x: I2c Bus Busy Wait 00
[  793.026300][  T806] gspca_vc032x: I2c Bus Busy Wait 00
[  793.037187][  T806] gspca_vc032x: I2c Bus Busy Wait 00
[  793.044746][  T806] gspca_vc032x: I2c Bus Busy Wait 00
[  793.045191][  T156] veth1_macvtap: left promiscuous mode
[  793.059031][  T806] gspca_vc032x: I2c Bus Busy Wait 00
[  793.065736][  T156] veth0_macvtap: left promiscuous mode
[  793.071977][  T156] veth1_vlan: left promiscuous mode
[  793.077525][  T806] gspca_vc032x: I2c Bus Busy Wait 00
[  793.078475][  T156] veth0_vlan: left promiscuous mode
[  793.085169][  T806] gspca_vc032x: I2c Bus Busy Wait 00
[  793.095806][  T806] gspca_vc032x: I2c Bus Busy Wait 00
[  793.102675][  T806] gspca_vc032x: I2c Bus Busy Wait 00
[  793.108575][  T806] gspca_vc032x: Unknown sensor...
[  793.129811][  T806] vc032x 8-1:0.0: probe with driver vc032x failed with error -22
[  793.462149][ T8978] Bluetooth: hci1: command tx timeout
[  794.616057][  T156] team0 (unregistering): Port device team_slave_1 removed
[  794.705733][  T156] team0 (unregistering): Port device team_slave_0 removed
[  795.767673][   T30] usb 8-1: USB disconnect, device number 26
[  796.876107][T10149] 8021q: adding VLAN 0 to HW filter on device bond0
[  797.121789][T10149] 8021q: adding VLAN 0 to HW filter on device team0
[  797.293904][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[  797.301561][ T5822] bridge0: port 1(bridge_slave_0) entered forwarding state
[  797.424947][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  797.432509][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  798.186411][T10268] bridge0: port 1(bridge_slave_0) entered blocking state
[  798.215787][T10268] bridge0: port 1(bridge_slave_0) entered disabled state
[  798.243669][T10268] bridge_slave_0: entered allmulticast mode
[  798.272137][T10268] bridge_slave_0: entered promiscuous mode
[  798.357400][T10268] bridge0: port 2(bridge_slave_1) entered blocking state
[  798.379635][T10268] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.406172][T10268] bridge_slave_1: entered allmulticast mode
[  798.429131][T10268] bridge_slave_1: entered promiscuous mode
[  798.768379][T10268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  798.832996][T10268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  799.220016][T10268] team0: Port device team_slave_0 added
[  799.272195][T10268] team0: Port device team_slave_1 added
[  799.549601][T10268] batman_adv: batadv0: Adding interface: batadv_slave_0
[  799.580751][T10268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  799.684055][T10268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  799.796870][T10268] batman_adv: batadv0: Adding interface: batadv_slave_1
[  799.829598][T10268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  799.938201][T10268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  800.833273][T10268] hsr_slave_0: entered promiscuous mode
[  800.878687][T10268] hsr_slave_1: entered promiscuous mode
[  800.929030][T10268] debugfs: 'hsr0' already exists in 'hsr'
[  800.949568][T10268] Cannot create hsr debugfs directory
[  801.816421][T10378] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1234'.
[  801.887425][T10375] syzkaller0: entered promiscuous mode
[  801.921942][T10375] syzkaller0: entered allmulticast mode
[  805.126940][T10149] 8021q: adding VLAN 0 to HW filter on device batadv0
[  805.179051][T10268] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  805.320727][T10268] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  805.392892][T10268] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  805.488030][T10268] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  805.558196][T10268] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  805.704097][T10268] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  805.772142][T10268] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  805.923063][T10268] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  806.876576][T10419] syzkaller0: entered promiscuous mode
[  806.888385][T10419] syzkaller0: entered allmulticast mode
[  806.966393][T10419] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1244'.
[  807.923119][T10268] 8021q: adding VLAN 0 to HW filter on device bond0
[  808.221997][T10268] 8021q: adding VLAN 0 to HW filter on device team0
[  808.326547][ T3292] bridge0: port 1(bridge_slave_0) entered blocking state
[  808.334220][ T3292] bridge0: port 1(bridge_slave_0) entered forwarding state
[  808.554722][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state
[  808.562359][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state
[  809.301776][T10149] veth0_vlan: entered promiscuous mode
[  809.646296][T10149] veth1_vlan: entered promiscuous mode
[  810.343273][T10149] veth0_macvtap: entered promiscuous mode
[  810.436067][T10149] veth1_macvtap: entered promiscuous mode
[  810.728037][T10149] batman_adv: batadv0: Interface activated: batadv_slave_0
[  810.920590][T10149] batman_adv: batadv0: Interface activated: batadv_slave_1
[  811.145309][ T6234] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  811.204118][ T6234] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  811.264231][ T6234] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  811.316420][ T6234] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  812.989099][ T8978] Bluetooth: hci3: unexpected event for opcode 0x0000
[  814.297881][T10268] 8021q: adding VLAN 0 to HW filter on device batadv0
[  815.201320][T10492] syzkaller0: entered promiscuous mode
[  815.231977][T10492] syzkaller0: entered allmulticast mode
[  815.286896][T10492] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1254'.
[  815.385909][T10497] input: syz1 as /devices/virtual/input/input32
[  817.053785][ T8978] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  817.062536][ T8978] Bluetooth: hci3: Injecting HCI hardware error event
[  817.069968][ T5582] Bluetooth: hci3: hardware error 0x00
[  817.535086][T10268] veth0_vlan: entered promiscuous mode
[  817.690728][T10268] veth1_vlan: entered promiscuous mode
[  817.806440][ T8978] Bluetooth: hci3: unexpected event for opcode 0x0000
[  818.178842][T10268] veth0_macvtap: entered promiscuous mode
[  818.321039][T10268] veth1_macvtap: entered promiscuous mode
[  818.349846][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  818.360851][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  818.694692][T10268] batman_adv: batadv0: Interface activated: batadv_slave_0
[  818.783300][   T30] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  818.832090][T10268] batman_adv: batadv0: Interface activated: batadv_slave_1
[  818.980894][ T6230] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  818.981899][   T30] usb 1-1: Using ep0 maxpacket: 32
[  819.018174][ T6230] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  819.049768][   T30] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  819.077945][ T6230] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  819.084324][   T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  819.114511][   T81] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  819.138685][ T5582] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  819.148077][   T30] usb 1-1: config 0 descriptor??
[  819.248949][   T30] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  819.435255][   T30] gspca_vc032x: reg_r err -32
[  819.467510][   T30] gspca_vc032x: I2c Bus Busy Wait 00
[  819.493021][   T30] gspca_vc032x: I2c Bus Busy Wait 00
[  819.527356][   T30] gspca_vc032x: I2c Bus Busy Wait 00
[  819.560303][   T30] gspca_vc032x: I2c Bus Busy Wait 00
[  819.590299][   T30] gspca_vc032x: I2c Bus Busy Wait 00
[  819.628320][   T30] gspca_vc032x: I2c Bus Busy Wait 00
[  819.656370][   T30] gspca_vc032x: I2c Bus Busy Wait 00
[  819.688526][   T30] gspca_vc032x: I2c Bus Busy Wait 00
[  819.705001][   T30] gspca_vc032x: I2c Bus Busy Wait 00
[  819.740449][   T30] gspca_vc032x: I2c Bus Busy Wait 00
[  819.756742][   T30] gspca_vc032x: I2c Bus Busy Wait 00
[  819.793300][   T30] gspca_vc032x: I2c Bus Busy Wait 00
[  819.835455][   T30] gspca_vc032x: I2c Bus Busy Wait 00
[  819.853500][   T30] gspca_vc032x: I2c Bus Busy Wait 00
[  819.896096][   T30] gspca_vc032x: I2c Bus Busy Wait 00
[  819.933749][   T30] gspca_vc032x: I2c Bus Busy Wait 00
[  819.953926][   T30] gspca_vc032x: I2c Bus Busy Wait 00
[  819.983204][   T30] gspca_vc032x: I2c Bus Busy Wait 00
[  820.024675][   T30] gspca_vc032x: Unknown sensor...
[  820.060506][   T30] vc032x 1-1:0.0: probe with driver vc032x failed with error -22
[  820.768304][ T8978] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  820.783018][ T8978] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  820.794539][ T8978] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  820.823033][ T8978] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  820.834731][ T8978] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  821.185793][T10560] input: syz1 as /devices/virtual/input/input34
[  822.430952][ T5203] usb 1-1: USB disconnect, device number 74
[  822.892913][ T8978] Bluetooth: hci4: command tx timeout
[  823.758674][   T56] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  824.019735][   T56] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  824.235590][T10592] program syz.0.1268 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  824.331357][   T56] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  824.584701][   T56] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  824.973625][ T8978] Bluetooth: hci4: command tx timeout
[  825.020486][T10600] program syz.1.1271 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  825.777050][   T56] bridge_slave_1: left allmulticast mode
[  825.819237][   T56] bridge_slave_1: left promiscuous mode
[  825.845715][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[  825.903371][T10611] input: syz1 as /devices/virtual/input/input36
[  825.953605][   T56] bridge_slave_0: left allmulticast mode
[  825.988258][   T56] bridge_slave_0: left promiscuous mode
[  826.014711][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[  826.983254][ T9618] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  827.052722][ T8978] Bluetooth: hci4: command tx timeout
[  827.162926][ T9618] usb 2-1: Using ep0 maxpacket: 32
[  827.185553][ T9618] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  827.195118][ T9618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  827.236718][ T9618] usb 2-1: config 0 descriptor??
[  827.247913][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  827.303355][ T9618] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  827.373916][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  827.419337][   T56] bond0 (unregistering): Released all slaves
[  827.540100][ T9618] gspca_vc032x: reg_r err -32
[  827.555387][ T9618] gspca_vc032x: I2c Bus Busy Wait 00
[  827.565019][   T30] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  827.585354][ T9618] gspca_vc032x: I2c Bus Busy Wait 00
[  827.608856][ T9618] gspca_vc032x: I2c Bus Busy Wait 00
[  827.637019][ T9618] gspca_vc032x: I2c Bus Busy Wait 00
[  827.657468][ T9618] gspca_vc032x: I2c Bus Busy Wait 00
[  827.691760][ T9618] gspca_vc032x: I2c Bus Busy Wait 00
[  827.702659][ T9618] gspca_vc032x: I2c Bus Busy Wait 00
[  827.714260][ T9618] gspca_vc032x: I2c Bus Busy Wait 00
[  827.725692][ T9618] gspca_vc032x: I2c Bus Busy Wait 00
[  827.742590][ T9618] gspca_vc032x: I2c Bus Busy Wait 00
[  827.777103][ T9618] gspca_vc032x: I2c Bus Busy Wait 00
[  827.799421][ T9618] gspca_vc032x: I2c Bus Busy Wait 00
[  827.811244][   T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  827.825771][ T9618] gspca_vc032x: I2c Bus Busy Wait 00
[  827.844977][ T9618] gspca_vc032x: I2c Bus Busy Wait 00
[  827.854264][   T30] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  827.856720][ T9618] gspca_vc032x: I2c Bus Busy Wait 00
[  827.899174][ T9618] gspca_vc032x: I2c Bus Busy Wait 00
[  827.911900][ T9618] gspca_vc032x: I2c Bus Busy Wait 00
[  827.917654][ T9618] gspca_vc032x: I2c Bus Busy Wait 00
[  827.919250][   T30] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  827.932644][ T9618] gspca_vc032x: Unknown sensor...
[  827.953581][ T9618] vc032x 2-1:0.0: probe with driver vc032x failed with error -22
[  828.061330][   T30] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  828.088633][T10624] syzkaller1: entered promiscuous mode
[  828.098163][   T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  828.102146][T10624] syzkaller1: entered allmulticast mode
[  828.109214][   T30] usb 1-1: Product: syz
[  828.116580][   T30] usb 1-1: Manufacturer: syz
[  828.122210][   T30] usb 1-1: SerialNumber: syz
[  828.194121][   T30] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[  828.216179][   T56] hsr_slave_0: left promiscuous mode
[  828.222453][   T30] cdc_ncm 1-1:1.0: bind() failure
[  828.237656][   T56] hsr_slave_1: left promiscuous mode
[  828.276167][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  828.308393][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[  828.339861][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  828.361651][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[  828.420058][   T30] usb 1-1: USB disconnect, device number 75
[  828.458647][   T56] veth1_macvtap: left promiscuous mode
[  828.473734][   T56] veth0_macvtap: left promiscuous mode
[  828.480862][   T56] veth1_vlan: left promiscuous mode
[  828.488793][   T56] veth0_vlan: left promiscuous mode
[  828.924268][T10639] program syz.7.1279 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  829.135158][ T8978] Bluetooth: hci4: command tx timeout
[  829.504843][   T56] team0 (unregistering): Port device team_slave_1 removed
[  829.530017][   T56] team0 (unregistering): Port device team_slave_0 removed
[  830.270778][   T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  830.312186][   T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  830.428667][   T30] usb 2-1: USB disconnect, device number 62
[  831.000274][T10652] input: syz1 as /devices/virtual/input/input38
[  831.064651][ T6234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  831.117625][ T6234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  832.141698][ T9618] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  832.350488][ T9618] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  832.429584][ T9618] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  832.469495][ T9618] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  832.531227][ T9618] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  832.582219][ T9618] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.595578][T10551] bridge0: port 1(bridge_slave_0) entered blocking state
[  832.612141][T10551] bridge0: port 1(bridge_slave_0) entered disabled state
[  832.619457][ T9618] usb 8-1: Product: syz
[  832.619560][ T9618] usb 8-1: Manufacturer: syz
[  832.647988][T10551] bridge_slave_0: entered allmulticast mode
[  832.655238][ T9618] usb 8-1: SerialNumber: syz
[  832.687913][ T9618] usb 8-1: config 0 descriptor??
[  832.690485][T10551] bridge_slave_0: entered promiscuous mode
[  832.724109][T10664] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  832.754818][T10664] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  832.798143][ T9618] usb 8-1: ucan: probing device on interface #0
[  832.805908][T10551] bridge0: port 2(bridge_slave_1) entered blocking state
[  832.840881][T10551] bridge0: port 2(bridge_slave_1) entered disabled state
[  832.867721][T10551] bridge_slave_1: entered allmulticast mode
[  832.923477][T10551] bridge_slave_1: entered promiscuous mode
[  833.222408][ T9618] usb 8-1: ucan: device reported invalid device info
[  833.242581][ T9618] usb 8-1: ucan: probe failed; try to update the device firmware
[  833.372589][T10551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  833.446713][ T9618] usb 8-1: USB disconnect, device number 27
[  833.477744][T10551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  833.948730][T10551] team0: Port device team_slave_0 added
[  834.077790][T10551] team0: Port device team_slave_1 added
[  834.260426][T10688] syzkaller1: entered promiscuous mode
[  834.287590][T10688] syzkaller1: entered allmulticast mode
[  834.392325][   T30] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  834.588324][T10551] batman_adv: batadv0: Adding interface: batadv_slave_0
[  834.624184][T10551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  834.698845][   T30] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  834.721378][T10551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  834.745194][   T30] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  834.768585][   T30] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  834.837349][T10551] batman_adv: batadv0: Adding interface: batadv_slave_1
[  834.857419][   T30] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  834.873050][T10551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  834.905130][   T30] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  834.915912][   T30] usb 10-1: Product: syz
[  834.931687][   T30] usb 10-1: Manufacturer: syz
[  834.960064][   T30] usb 10-1: SerialNumber: syz
[  834.996985][T10698] input: syz1 as /devices/virtual/input/input40
[  835.014971][T10551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  835.047842][   T30] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found
[  835.107253][   T30] cdc_ncm 10-1:1.0: bind() failure
[  835.264465][ T9618] usb 10-1: USB disconnect, device number 2
[  835.925604][T10551] hsr_slave_0: entered promiscuous mode
[  836.007675][T10551] hsr_slave_1: entered promiscuous mode
[  836.061413][T10551] debugfs: 'hsr0' already exists in 'hsr'
[  837.917503][T10551] Cannot create hsr debugfs directory
[  843.513227][ T5226] 8021q: adding VLAN 0 to HW filter on device eth21
[  844.444448][ T9733] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  844.670831][ T9733] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  844.723062][ T9733] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  844.793703][ T9733] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  844.891794][ T9733] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  844.917792][T10734] input: syz1 as /devices/virtual/input/input42
[  844.935044][ T9733] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  844.980408][ T9733] usb 8-1: Product: syz
[  845.005541][ T9733] usb 8-1: Manufacturer: syz
[  845.051153][ T9733] usb 8-1: SerialNumber: syz
[  845.122368][ T9733] usb 8-1: config 0 descriptor??
[  845.181221][T10727] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  845.218475][T10727] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  845.264129][ T9733] usb 8-1: ucan: probing device on interface #0
[  845.439789][T10551] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  845.565581][T10551] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  845.603697][T10551] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  845.695842][T10551] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  845.719930][ T9733] usb 8-1: ucan: device reported invalid device info
[  845.730257][T10551] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  845.751712][ T9733] usb 8-1: ucan: probe failed; try to update the device firmware
[  849.548833][T10551] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  851.910936][   T30] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  851.970899][ T5203] usb 8-1: USB disconnect, device number 28
[  852.081229][T10746] syzkaller1: entered promiscuous mode
[  852.115554][T10746] syzkaller1: entered allmulticast mode
[  852.199763][T10551] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  852.403881][T10551] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  854.060049][T10551] 8021q: adding VLAN 0 to HW filter on device bond0
[  854.429274][T10777] input: syz1 as /devices/virtual/input/input44
[  854.523108][T10551] 8021q: adding VLAN 0 to HW filter on device team0
[  854.660383][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  854.668081][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  854.895219][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[  854.903008][ T5822] bridge0: port 2(bridge_slave_1) entered forwarding state
[  855.634142][ T5686] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  855.864736][ T5686] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  855.897746][ T5686] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  855.996237][ T5686] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  856.152861][ T5686] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  856.211154][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.264738][ T5686] usb 1-1: Product: syz
[  856.295376][ T5686] usb 1-1: Manufacturer: syz
[  856.317199][ T5686] usb 1-1: SerialNumber: syz
[  856.365322][ T5686] usb 1-1: config 0 descriptor??
[  856.400962][T10785] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  856.467741][T10785] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  856.525350][ T5686] usb 1-1: ucan: probing device on interface #0
[  856.986328][ T5686] usb 1-1: ucan: device reported invalid device info
[  856.989139][T10809] syzkaller1: entered promiscuous mode
[  857.017057][T10809] syzkaller1: entered allmulticast mode
[  857.019466][ T5686] usb 1-1: ucan: probe failed; try to update the device firmware
[  857.224563][ T5686] usb 1-1: USB disconnect, device number 77
[  857.312089][   T30] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  857.517288][   T30] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  857.564256][   T30] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  857.597080][   T30] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  857.669156][   T30] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  857.690591][   T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  857.714328][   T30] usb 8-1: Product: syz
[  857.731990][   T30] usb 8-1: Manufacturer: syz
[  857.738605][   T30] usb 8-1: SerialNumber: syz
[  857.806454][   T30] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found
[  857.838501][   T30] cdc_ncm 8-1:1.0: bind() failure
[  858.020132][   T30] usb 8-1: USB disconnect, device number 29
[  859.080419][T10833] input: syz1 as /devices/virtual/input/input46
[  865.890160][T10551] 8021q: adding VLAN 0 to HW filter on device batadv0
[  867.236183][T10864] sg_write: data in/out 46321779/178 bytes for SCSI command 0x0-- guessing data in;
[  867.236183][T10864]    program syz.9.1334 not setting count and/or reply_len properly
[  867.365242][T10868] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9)
[  867.372003][T10868] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  867.384230][T10869] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1335'.
[  867.470608][T10868] vhci_hcd vhci_hcd.0: Device attached
[  867.722304][ T9618] usb 51-1: new low-speed USB device number 2 using vhci_hcd
[  867.873866][T10869] 8021q: adding VLAN 0 to HW filter on device bond2
[  868.069145][T10870] vhci_hcd: connection reset by peer
[  868.125523][   T56] vhci_hcd vhci_hcd.9: stop threads
[  868.164791][   T56] vhci_hcd vhci_hcd.9: release socket
[  868.175031][T10873] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  868.205183][   T56] vhci_hcd vhci_hcd.9: disconnect device
[  868.243651][ T5677] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  868.546251][ T5677] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  870.309906][ T5677] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  871.310003][T10881] syzkaller1: entered promiscuous mode
[  872.312333][ T5677] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  873.327326][T10881] syzkaller1: entered allmulticast mode
[  874.288324][ T9618] vhci_hcd vhci_hcd.9: vhci_device speed not set
[  875.363759][ T5677] usb 1-1: string descriptor 0 read error: -71
[  875.416104][ T5677] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  875.492107][ T5677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  875.570574][ T5677] usb 1-1: can't set config #1, error -71
[  875.647758][ T5677] usb 1-1: USB disconnect, device number 78
[  876.134780][T10551] veth0_vlan: entered promiscuous mode
[  876.242231][T10551] veth1_vlan: entered promiscuous mode
[  876.735957][T10551] veth0_macvtap: entered promiscuous mode
[  876.752175][   T30] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  876.824070][T10551] veth1_macvtap: entered promiscuous mode
[  876.940958][   T30] usb 2-1: too many configurations: 36, using maximum allowed: 8
[  877.084402][   T30] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  877.084552][   T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  877.084668][   T30] usb 2-1: Product: syz
[  877.084760][   T30] usb 2-1: Manufacturer: syz
[  877.084852][   T30] usb 2-1: SerialNumber: syz
[  877.129135][T10551] batman_adv: batadv0: Interface activated: batadv_slave_0
[  877.168727][   T30] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  877.335936][ T8326] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  877.363685][T10551] batman_adv: batadv0: Interface activated: batadv_slave_1
[  877.710195][ T6230] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  877.710471][ T6230] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  877.710669][ T6230] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  877.742739][ T6230] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  877.882108][ T9618] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  877.889089][ T5677] usb 2-1: USB disconnect, device number 63
[  878.055022][ T9618] usb 10-1: Using ep0 maxpacket: 8
[  878.089782][ T9618] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  878.089934][ T9618] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  878.090054][ T9618] usb 10-1: Product: syz
[  878.090157][ T9618] usb 10-1: Manufacturer: syz
[  878.090259][ T9618] usb 10-1: SerialNumber: syz
[  878.139971][ T9618] usb 10-1: config 0 descriptor??
[  878.193360][ T9618] gspca_main: se401-2.14.0 probing 047d:5003
[  878.582925][ T8326] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  878.583679][ T8326] ath9k_htc: Failed to initialize the device
[  878.595630][ T9618] gspca_se401: Bayer format not supported!
[  878.596748][ T5677] usb 2-1: ath9k_htc: USB layer deinitialized
[  878.827425][ T9618] usb 10-1: USB disconnect, device number 3
[  879.787847][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  879.797028][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  880.567038][T10942] syzkaller1: entered promiscuous mode
[  880.597996][T10942] syzkaller1: entered allmulticast mode
[  880.658884][T10943] =====================================================
[  880.666591][T10943] BUG: KMSAN: uninit-value in dvb_demux_read+0x580/0xa40
[  880.674162][T10943]  dvb_demux_read+0x580/0xa40
[  880.679096][T10943]  vfs_readv+0x931/0xf30
[  880.683688][T10943]  __ia32_compat_sys_preadv+0x2da/0x540
[  880.689430][T10943]  ia32_sys_call+0x3e87/0x4360
[  880.694639][T10943]  __do_fast_syscall_32+0x180/0x460
[  880.700256][T10943]  do_fast_syscall_32+0x37/0x80
[  880.711779][T10943]  do_SYSENTER_32+0x1f/0x30
[  880.716701][T10943]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  880.726569][T10943] 
[  880.729018][T10943] Uninit was created at:
[  880.733926][T10943]  __alloc_frozen_pages_noprof+0x6fa/0x1000
[  880.740131][T10943]  alloc_pages_mpol+0x328/0x860
[  880.745366][T10943]  alloc_pages_noprof+0x101/0x290
[  880.750629][T10943]  __vmalloc_node_range_noprof+0xab0/0x2cd0
[  880.756872][T10943]  __vmalloc_noprof+0x128/0x1f0
[  880.762613][T10943]  vmalloc_array_noprof+0x48/0x80
[  880.767939][T10943]  dvb_dmxdev_init+0xd8/0x680
[  880.774207][T10943]  vidtv_bridge_probe+0x1bfd/0x2690
[  880.779713][T10943]  platform_probe+0x213/0x370
[  880.784753][T10943]  really_probe+0x4d5/0xe40
[  880.789483][T10943]  __driver_probe_device+0x2fb/0x410
[  880.795198][T10943]  driver_probe_device+0x70/0x8f0
[  880.800404][T10943]  __driver_attach+0x541/0xaa0
[  880.808978][T10943]  bus_for_each_dev+0x33b/0x580
[  880.816174][T10943]  driver_attach+0x51/0x70
[  880.820779][T10943]  bus_add_driver+0x54f/0xdb0
[  880.826219][T10943]  driver_register+0x42e/0x6a0
[  880.831179][T10943]  __platform_driver_register+0x65/0x80
[  880.837066][T10943]  vidtv_bridge_init+0x73/0x100
[  880.842329][T10943]  do_one_initcall+0x237/0xb30
[  880.847260][T10943]  do_initcall_level+0x157/0x330
[  880.852743][T10943]  do_initcalls+0x176/0x310
[  880.857353][T10943]  do_basic_setup+0x22/0x30
[  880.862001][T10943]  kernel_init_freeable+0x213/0x460
[  880.867274][T10943]  kernel_init+0x2f/0x5e0
[  880.871858][T10943]  ret_from_fork+0x20f/0x8d0
[  880.876557][T10943]  ret_from_fork_asm+0x1a/0x30
[  880.881403][T10943] 
[  880.883975][T10943] CPU: 0 UID: 0 PID: 10943 Comm: syz.9.1352 Not tainted syzkaller #0 PREEMPT(full) 
[  880.893552][T10943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  880.903771][T10943] =====================================================
[  880.913094][T10943] Disabling lock debugging due to kernel taint
[  880.931663][T10943] Kernel panic - not syncing: kmsan.panic set ...
[  880.938241][T10943] CPU: 0 UID: 0 PID: 10943 Comm: syz.9.1352 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  880.949344][T10943] Tainted: [B]=BAD_PAGE
[  880.953536][T10943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  880.963673][T10943] Call Trace:
[  880.966996][T10943]  <TASK>
[  880.970018][T10943]  __dump_stack+0x26/0x30
[  880.974443][T10943]  dump_stack_lvl+0x50/0x1c0
[  880.979112][T10943]  ? dump_stack+0x12/0x25
[  880.983530][T10943]  dump_stack+0x1e/0x25
[  880.987771][T10943]  vpanic+0x7b4/0x1430
[  880.991983][T10943]  panic+0x15d/0x160
[  880.995999][T10943]  kmsan_report+0x31a/0x320
[  881.000609][T10943]  ? __msan_warning+0x1b/0x30
[  881.005374][T10943]  ? dvb_demux_read+0x580/0xa40
[  881.010330][T10943]  ? vfs_readv+0x931/0xf30
[  881.014815][T10943]  ? __ia32_compat_sys_preadv+0x2da/0x540
[  881.020648][T10943]  ? ia32_sys_call+0x3e87/0x4360
[  881.025694][T10943]  ? __do_fast_syscall_32+0x180/0x460
[  881.031185][T10943]  ? do_fast_syscall_32+0x37/0x80
[  881.036318][T10943]  ? do_SYSENTER_32+0x1f/0x30
[  881.041093][T10943]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  881.047717][T10943]  ? __rcu_read_unlock+0x6c/0xd0
[  881.052767][T10943]  ? aa_file_perm+0x4b9/0x2870
[  881.057660][T10943]  ? aa_file_perm+0x4f0/0x2870
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  881.062520][T10943]  ? stack_depot_save_flags+0x35/0x790
[  881.068108][T10943]  ? kmsan_get_metadata+0xf1/0x160
[  881.073331][T10943]  ? kmsan_get_metadata+0xf1/0x160
[  881.078545][T10943]  ? kmsan_get_metadata+0xf1/0x160
[  881.083792][T10943]  ? kmsan_get_metadata+0xf1/0x160
[  881.089106][T10943]  ? kmsan_get_metadata+0x146/0x160
[  881.094509][T10943]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  881.101044][T10943]  ? __pfx_dvb_demux_read+0x10/0x10
[  881.106394][T10943]  ? kmsan_get_metadata+0x146/0x160
[  881.111729][T10943]  __msan_warning+0x1b/0x30
[  881.116384][T10943]  dvb_demux_read+0x580/0xa40
[  881.121183][T10943]  ? __pfx_dvb_demux_read+0x10/0x10
[  881.126498][T10943]  vfs_readv+0x931/0xf30
[  881.130848][T10943]  ? kmsan_get_metadata+0xf1/0x160
[  881.136069][T10943]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  881.142087][T10943]  __ia32_compat_sys_preadv+0x2da/0x540
[  881.147763][T10943]  ia32_sys_call+0x3e87/0x4360
[  881.152643][T10943]  __do_fast_syscall_32+0x180/0x460
[  881.157955][T10943]  do_fast_syscall_32+0x37/0x80
[  881.162922][T10943]  do_SYSENTER_32+0x1f/0x30
[  881.167528][T10943]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  881.173972][T10943] RIP: 0023:0xf708f00c
[  881.178112][T10943] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  881.197809][T10943] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 000000000000014d
[  881.206313][T10943] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000480
[  881.214370][T10943] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000000d
[  881.222440][T10943] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  881.230476][T10943] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  881.238522][T10943] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  881.246623][T10943]  </TASK>
[  881.249989][T10943] Kernel Offset: disabled
[  881.254459][T10943] Rebooting in 86400 seconds..