last executing test programs:

7m39.777926757s ago: executing program 32 (id=375):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendfile(r0, r1, 0x0, 0xffffffff004)

7m33.718360036s ago: executing program 0 (id=416):
socket$rds(0x15, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

7m32.341746481s ago: executing program 0 (id=420):
r0 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x6, 0x5, 0x3})

7m31.612038218s ago: executing program 0 (id=423):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140))
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x4004)

7m30.838218796s ago: executing program 0 (id=425):
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x0)
ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0)

7m28.96287742s ago: executing program 0 (id=426):
syz_usb_connect(0x0, 0x48, 0x0, 0x0)

7m26.756290895s ago: executing program 0 (id=428):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000008, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$ttyprintk(0xffffff9c, 0x0, 0x20000, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r2)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, 0x0, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYRESDEC], 0x27)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

7m11.380741132s ago: executing program 33 (id=428):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000008, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$ttyprintk(0xffffff9c, 0x0, 0x20000, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r2)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, 0x0, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYRESDEC], 0x27)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

6m29.45696211s ago: executing program 3 (id=516):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r1], 0x24}}, 0x4004)

6m28.321696741s ago: executing program 3 (id=519):
syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d0502002723010203010902"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040)

6m26.363438263s ago: executing program 3 (id=524):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x20000014)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000580)="b3185d7bb56f"})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r10=>0x0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)={0x40, r9, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x48}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

6m24.749094927s ago: executing program 3 (id=525):
r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}})
pread64(r0, 0x0, 0x0, 0x0)

6m24.164537055s ago: executing program 3 (id=527):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r1], 0x24}}, 0x4004)

6m22.236355236s ago: executing program 3 (id=529):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000)
socket$netlink(0x10, 0x3, 0x6)
r2 = syz_open_dev$vbi(0x0, 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x3686df85, 0x10, 0x7, 0x2, 0xfffffff8, 0x4, 0x6, 0x79bf3530}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040095}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x6000, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20045010}, 0x0)

6m13.513072141s ago: executing program 6 (id=449):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x2711, @local}, 0x10)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0)
r1 = fsopen(0x0, 0x1)
r2 = gettid()
rt_sigqueueinfo(r2, 0x21, &(0x7f0000000100)={0x1f})
ioprio_set$pid(0x1, r2, 0x4000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x6, 0x7ff00003}]})
r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
pidfd_getfd(0xffffffffffffffff, r3, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)

6m6.546499623s ago: executing program 34 (id=529):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000)
socket$netlink(0x10, 0x3, 0x6)
r2 = syz_open_dev$vbi(0x0, 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x3686df85, 0x10, 0x7, 0x2, 0xfffffff8, 0x4, 0x6, 0x79bf3530}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040095}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x6000, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20045010}, 0x0)

5m57.62780452s ago: executing program 35 (id=449):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x2711, @local}, 0x10)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0)
r1 = fsopen(0x0, 0x1)
r2 = gettid()
rt_sigqueueinfo(r2, 0x21, &(0x7f0000000100)={0x1f})
ioprio_set$pid(0x1, r2, 0x4000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x6, 0x7ff00003}]})
r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
pidfd_getfd(0xffffffffffffffff, r3, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)

5m34.015157374s ago: executing program 5 (id=584):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000033c0)=[{0x0}, {0x0}], 0x2, 0x9, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
r3 = eventfd(0x5f1)
ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r3})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, 0x0)

5m30.102738117s ago: executing program 5 (id=589):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

5m27.358643618s ago: executing program 5 (id=591):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r0, 0x4068aea3, &(0x7f0000000540)={0x80, 0x0, 0x80000000})

5m26.886476191s ago: executing program 5 (id=592):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000280)={0x3, 0xa, 0xfffffffc, 0x8, 0x1})

5m26.058113313s ago: executing program 5 (id=595):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
openat$mice(0xffffff9c, &(0x7f0000000140), 0x1a9142)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000340)={0x1, 0x1000}, 0x4)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000062c0)="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", 0x2000, 0x0)
syz_emit_ethernet(0x61, &(0x7f00000003c0)=ANY=[], 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x4044)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
getresgid(&(0x7f0000000040), 0x0, &(0x7f0000000240))
open$dir(&(0x7f0000000400)='./file0/file0/file0\x00', 0x8000, 0x8a)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}]}}]}, 0x3c}}, 0x4044080)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000001f00))

5m25.13537227s ago: executing program 5 (id=597):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1a, 0x41c}}}, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0)
openat$binderfs_ctrl(0xffffff9c, &(0x7f0000002800)='./binderfs/binder-control\x00', 0x0, 0x0)
r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
pwritev2(r4, &(0x7f0000000700)=[{&(0x7f0000003600)}], 0x1, 0x8800000, 0x0, 0x4)
r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000})
close(r5)
ioctl$I2C_FUNCS(r4, 0x705, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x40044160, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x1a, 0x0, &(0x7f0000000100)="bdff0300600d698cff9e14f00800f27ecdcdb6ae12115e6ba3ef", 0x0, 0x8000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$HIDIOCGUSAGE(r6, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x0, 0x44})

5m9.367169255s ago: executing program 36 (id=597):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1a, 0x41c}}}, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0)
openat$binderfs_ctrl(0xffffff9c, &(0x7f0000002800)='./binderfs/binder-control\x00', 0x0, 0x0)
r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
pwritev2(r4, &(0x7f0000000700)=[{&(0x7f0000003600)}], 0x1, 0x8800000, 0x0, 0x4)
r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000})
close(r5)
ioctl$I2C_FUNCS(r4, 0x705, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x40044160, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x1a, 0x0, &(0x7f0000000100)="bdff0300600d698cff9e14f00800f27ecdcdb6ae12115e6ba3ef", 0x0, 0x8000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$HIDIOCGUSAGE(r6, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x0, 0x44})

4m56.892309789s ago: executing program 2 (id=622):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r1])
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x12)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r3, 0x2f, 0x0, @void}, 0x10)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r4, r3, 0x4, r3}, 0x10)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x8000)
r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0)
ppoll(&(0x7f0000000040)=[{r6, 0xb00}], 0x1, 0x0, 0x0, 0x0)
read$dsp(r6, &(0x7f0000003200)=""/4088, 0x57d)
write$dsp(r2, &(0x7f0000002200)="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", 0x1000)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)

4m52.976820372s ago: executing program 2 (id=625):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf250300000005002f0001000000080003", @ANYRES32=r1], 0x24}}, 0x4004)

4m52.047014919s ago: executing program 2 (id=626):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, 0x0)

4m51.057474314s ago: executing program 2 (id=628):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
eventfd(0x5f1)
ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, 0x0)

4m50.183537411s ago: executing program 2 (id=630):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
preadv(r1, &(0x7f00000033c0)=[{&(0x7f00000001c0)=""/141, 0x8d}], 0x1, 0x9, 0x0)

4m46.418109219s ago: executing program 2 (id=633):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000006300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2)
r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x20000000fe, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = fsopen(&(0x7f0000000480)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x5)
fchdir(r4)
pipe2(0x0, 0x100080)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x49)
lseek(r5, 0x9, 0x1)
lseek(r0, 0x8000000000000000, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x20040844)
sysfs$1(0x1, &(0x7f0000000000)='pedit\x00')

4m30.312306586s ago: executing program 37 (id=633):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000006300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2)
r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x20000000fe, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = fsopen(&(0x7f0000000480)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x5)
fchdir(r4)
pipe2(0x0, 0x100080)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x49)
lseek(r5, 0x9, 0x1)
lseek(r0, 0x8000000000000000, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x20040844)
sysfs$1(0x1, &(0x7f0000000000)='pedit\x00')

16.159972884s ago: executing program 1 (id=890):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r2])
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x12)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, r4, 0x4, r4}, 0x10)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x8000)
r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0)
ppoll(&(0x7f0000000040)=[{r5, 0xb00}], 0x1, 0x0, 0x0, 0x0)
read$dsp(r5, &(0x7f0000003200)=""/4088, 0x57d)
write$dsp(r3, &(0x7f0000002200)="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", 0x1000)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc095}, 0xc810)

12.38714703s ago: executing program 1 (id=894):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)

11.882624815s ago: executing program 8 (id=895):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x8, 0x8})
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
socket$inet6(0xa, 0x805, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
timerfd_settime(0xffffffffffffffff, 0x6, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f0000000100))
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000895}, 0xc000)
ioctl$XFS_IOC_FSGROWFSDATA(r1, 0x4010586e, &(0x7f0000000000)={0x7, 0x8})
r6 = dup(r0)
syz_open_dev$vim2m(0x0, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000000)=0x2, 0x4)

10.560705131s ago: executing program 4 (id=897):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000200)=[0x0], &(0x7f0000000240), 0x1, 0x0, 0xcccccccc})

10.227079161s ago: executing program 1 (id=898):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000240))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x8, 0x50, 0x0, 0x1, 0x2, 0x4, 0x6, 0x99, 0xb, 0x4, 0x7, 0x3, 0xd1, 0x5, 0x8, 0x5}})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0x1, 0x3c4210})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
fcntl$setsig(r0, 0xa, 0x21)
fcntl$setlease(r0, 0x400, 0x3)
r6 = creat(&(0x7f0000000100)='./file0\x00', 0x1)
close_range(r0, r6, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @win={{0x1, 0x4, 0xffff, 0x4359b5a7}, 0x6, 0x2, &(0x7f00000000c0)={{0xffff0001, 0x3, 0x1, 0x7}, &(0x7f0000000080)={{0x7ff, 0x4, 0x786}, &(0x7f0000000040)={{0x1, 0x9, 0x7ff, 0x9}, &(0x7f0000000000)={{0xfff, 0x5, 0x96, 0x4}}}}}, 0x8001, &(0x7f0000000100)="7065b8810ce893bdfc679e3515b70a34f64858c925e37b44d78dab4af1bd3c1c6656e246e106ebda8ac86eb8f67fe7194cfdaad3237268fe680db3d7e094be9f97c5beed0c1e889b40fd50146dec8a4dc0970ed06dfb0fe972bf65dad8a1dd0a206ef0c5373800e752e35de614572bea8deb08ef2c5dec98b4c6aaf7f9d06e4de00d3fab3e24dce108b92e06287de5d25029c2347e505d6f5882e76ed932da523f2f1c94ca681d1414d05b43ddfd9909d75272f1b932bf5a4f7bd743", 0xf0}})
syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110013be742084f0801008e88010203010902120001e407900909047f0000ae333205"], 0x0)

10.116518279s ago: executing program 8 (id=899):
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x2ee}, 0x0, 0x0, 0x0)
syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000002c0), 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x3, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

9.726990711s ago: executing program 4 (id=900):
r0 = socket$inet6(0xa, 0x3, 0xfa)
setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x18)
setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000380)=0x3, 0x4)
sendto$inet6(r0, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c)

9.199564632s ago: executing program 4 (id=901):
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = eventfd(0x5f1)
ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r2})

8.472001131s ago: executing program 8 (id=902):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r2])
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x12)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r4, 0xffffffffffffffff, 0x4}, 0x10)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x8000)
r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0)
ppoll(&(0x7f0000000040)=[{r5, 0xb00}], 0x1, 0x0, 0x0, 0x0)
read$dsp(r5, &(0x7f0000003200)=""/4088, 0x57d)
write$dsp(r3, &(0x7f0000002200)="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", 0x1000)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc095}, 0xc810)

7.781948201s ago: executing program 4 (id=903):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2}}}}, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94)

6.705222713s ago: executing program 1 (id=904):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040c4}, 0x4c004)
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f00000001c0)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], 0x0, &(0x7f0000000200), &(0x7f00000001c0)})

5.911234541s ago: executing program 8 (id=905):
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x8802, 0x0)
write$midi(r0, &(0x7f0000000200), 0x0)

5.878967354s ago: executing program 1 (id=906):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.821034391s ago: executing program 4 (id=907):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0580, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0)
ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f0000000280))
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x48840)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x20008086, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x106f)
ioctl$SNDCTL_TMR_METRONOME(r6, 0x40045407)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYRES16=r8], 0x20}, 0x1, 0x40030000000000, 0x0, 0x20000400}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"})
ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @ioapic={0xeeee0300, 0x8000, 0x32, 0x8, 0x0, [{0x7, 0xbd, 0xff, '\x00', 0x6}, {0x5, 0x12, 0x0, '\x00', 0x4}, {0x4, 0x46, 0x3c, '\x00', 0x6}, {0x1, 0xfb, 0x1}, {0x8, 0x8, 0xc, '\x00', 0x46}, {0x8, 0x77, 0x1, '\x00', 0x19}, {0x17, 0x5, 0xd2, '\x00', 0x8d}, {0xa, 0x9, 0x1, '\x00', 0x6f}, {0x8, 0xf, 0x9}, {0x0, 0x3, 0xf, '\x00', 0x8}, {0x6, 0x3, 0xe1, '\x00', 0x5}, {0xfa, 0x46, 0x4, '\x00', 0xdd}, {0x1, 0x80, 0x2, '\x00', 0x5}, {0x80, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x81, 0x7, '\x00', 0xfd}, {0x4, 0x5, 0x2, '\x00', 0xf7}, {0x9, 0x10, 0x5, '\x00', 0x1}, {0xb5, 0x0, 0x9, '\x00', 0xc}, {0xa7, 0x1, 0x3, '\x00', 0x7}, {0xf, 0x3, 0x9, '\x00', 0xd}, {0x8, 0x5, 0x0, '\x00', 0x9}, {0x0, 0x5, 0x0, '\x00', 0xf1}, {0xa, 0x6b, 0x2f, '\x00', 0xff}, {0x8}]}})

4.651269685s ago: executing program 8 (id=908):
socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=000000000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r2, r2, 0x0, 0x200000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0x0, 0x7}, 0x38)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1002000ff)
syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r4, &(0x7f0000000000), 0x0)
mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r5, &(0x7f0000001340)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x400000000000126, 0xc040)

3.401623739s ago: executing program 4 (id=909):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r2])
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x12)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, r4, 0x4, r4}, 0x10)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x8000)
r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0)
ppoll(&(0x7f0000000040)=[{r6, 0xb00}], 0x1, 0x0, 0x0, 0x0)
read$dsp(r6, &(0x7f0000003200)=""/4088, 0x57d)
write$dsp(r3, &(0x7f0000002200)="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", 0x1000)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc095}, 0xc810)

604.355395ms ago: executing program 1 (id=910):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = io_uring_setup(0x13b5, &(0x7f0000000140)={0x0, 0x911c, 0x2, 0x3, 0x2fa})
socket(0x2, 0x80805, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x9)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10)

0s ago: executing program 8 (id=911):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x8, 0x8})
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
socket$inet6(0xa, 0x805, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
timerfd_settime(0xffffffffffffffff, 0x6, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f0000000100))
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000895}, 0xc000)
ioctl$XFS_IOC_FSGROWFSDATA(r1, 0x4010586e, &(0x7f0000000000)={0x7, 0x8})
r6 = dup(r0)
syz_open_dev$vim2m(0x0, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000000)=0x2, 0x4)

kernel console output (not intermixed with test programs):

easing backup interface
[  651.743325][ T6230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  651.774122][ T6230] bond0 (unregistering): Released all slaves
[  652.525971][ T6230] hsr_slave_0: left promiscuous mode
[  652.557303][ T6230] hsr_slave_1: left promiscuous mode
[  652.589733][   T48] Bluetooth: hci2: command tx timeout
[  652.603201][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  652.610995][ T6230] batman_adv: batadv0: Removing interface: batadv_slave_0
[  652.625338][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  652.633290][ T6230] batman_adv: batadv0: Removing interface: batadv_slave_1
[  652.641726][ T5685] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  652.670029][ T6230] veth1_macvtap: left promiscuous mode
[  652.690203][ T6230] veth0_macvtap: left promiscuous mode
[  652.696137][ T6230] veth1_vlan: left promiscuous mode
[  652.707201][ T6230] veth0_vlan: left promiscuous mode
[  652.786517][ T5685] usb 2-1: device descriptor read/64, error -71
[  653.061147][ T5685] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  653.209455][ T5685] usb 2-1: device descriptor read/64, error -71
[  653.332229][ T5685] usb usb2-port1: attempt power cycle
[  653.472013][   T48] Bluetooth: hci3: command tx timeout
[  653.662049][ T6230] team0 (unregistering): Port device team_slave_1 removed
[  653.720210][ T5685] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  653.724548][ T6230] team0 (unregistering): Port device team_slave_0 removed
[  653.756095][ T5685] usb 2-1: device descriptor read/8, error -71
[  654.051955][ T5685] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  654.094775][ T5685] usb 2-1: device descriptor read/8, error -71
[  654.210346][ T5685] usb usb2-port1: unable to enumerate USB device
[  655.170245][ T6230] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.549379][   T48] Bluetooth: hci3: command tx timeout
[  655.925886][ T6230] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.146124][ T6230] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.624108][ T5586] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  656.644162][ T5586] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  656.656616][ T5586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  656.669432][ T6230] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.693466][ T5586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  656.709097][ T5586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  656.743279][ T8445] veth0_vlan: entered promiscuous mode
[  657.628960][ T5586] Bluetooth: hci3: command tx timeout
[  657.679965][ T8445] veth1_vlan: entered promiscuous mode
[  658.203470][ T8633] bridge0: port 1(bridge_slave_0) entered blocking state
[  658.254775][ T8633] bridge0: port 1(bridge_slave_0) entered disabled state
[  658.288174][ T8633] bridge_slave_0: entered allmulticast mode
[  658.304289][ T8633] bridge_slave_0: entered promiscuous mode
[  658.407548][ T5682] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  658.492383][ T8633] bridge0: port 2(bridge_slave_1) entered blocking state
[  658.510616][ T8633] bridge0: port 2(bridge_slave_1) entered disabled state
[  658.534931][ T8633] bridge_slave_1: entered allmulticast mode
[  658.559452][ T8633] bridge_slave_1: entered promiscuous mode
[  658.596724][ T5682] usb 2-1: Using ep0 maxpacket: 16
[  658.625945][ T5682] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  658.651044][ T5682] usb 2-1: config 0 has no interface number 0
[  658.677897][ T5682] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  658.733459][ T5682] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  658.746582][ T5586] Bluetooth: hci1: command tx timeout
[  658.810671][ T5682] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  658.846733][ T5682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.858455][ T5682] usb 2-1: Product: syz
[  658.868397][ T5682] usb 2-1: Manufacturer: syz
[  658.880161][ T5682] usb 2-1: SerialNumber: syz
[  658.916052][ T5682] usb 2-1: config 0 descriptor??
[  658.941639][ T8768] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  658.968867][ T8768] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  658.980702][ T6230] bridge_slave_1: left allmulticast mode
[  659.003382][ T6230] bridge_slave_1: left promiscuous mode
[  659.018380][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state
[  659.034701][ T6230] bridge_slave_0: left allmulticast mode
[  659.042586][ T6230] bridge_slave_0: left promiscuous mode
[  659.054989][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.285359][ T8768] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  659.301586][ T8768] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  659.523677][ T5682] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  659.624164][ T6230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  659.653387][ T6230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  659.683445][ T6230] bond0 (unregistering): Released all slaves
[  659.734589][ T8633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  659.966130][ T8633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  660.154591][ T6230] hsr_slave_0: left promiscuous mode
[  660.184017][ T6230] hsr_slave_1: left promiscuous mode
[  660.221808][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  660.247504][ T6230] batman_adv: batadv0: Removing interface: batadv_slave_0
[  660.275178][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  660.283075][ T6230] batman_adv: batadv0: Removing interface: batadv_slave_1
[  660.331846][ T6230] veth1_macvtap: left promiscuous mode
[  660.343316][ T6230] veth0_macvtap: left promiscuous mode
[  660.353805][ T6230] veth1_vlan: left promiscuous mode
[  660.359736][ T6230] veth0_vlan: left promiscuous mode
[  660.751436][ T5682] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  660.769043][ T5682] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  660.790106][ T5682] asix 2-1:0.34: probe with driver asix failed with error -71
[  660.826767][ T5586] Bluetooth: hci1: command tx timeout
[  660.852726][ T5682] usb 2-1: USB disconnect, device number 79
[  661.488862][ T6230] team0 (unregistering): Port device team_slave_1 removed
[  661.594284][ T6230] team0 (unregistering): Port device team_slave_0 removed
[  662.328445][ T8633] team0: Port device team_slave_0 added
[  662.357907][ T5675] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  662.389222][ T8633] team0: Port device team_slave_1 added
[  662.516128][ T5675] usb 2-1: Using ep0 maxpacket: 16
[  662.538777][ T5675] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  662.551526][ T5675] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  662.566871][ T5675] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  662.611928][ T5675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.652359][ T5675] usb 2-1: config 0 descriptor??
[  662.818932][ T8633] batman_adv: batadv0: Adding interface: batadv_slave_0
[  662.842910][ T8633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  662.904574][ T5586] Bluetooth: hci1: command tx timeout
[  662.928178][ T8633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  663.017677][ T5675] usb 2-1: USB disconnect, device number 80
[  663.053786][ T8633] batman_adv: batadv0: Adding interface: batadv_slave_1
[  663.087755][ T8633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  663.132619][ T8633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  663.181905][   T55] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.455016][   T55] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.532177][ T8633] hsr_slave_0: entered promiscuous mode
[  663.551417][ T8633] hsr_slave_1: entered promiscuous mode
[  663.567851][ T8633] debugfs: 'hsr0' already exists in 'hsr'
[  663.579150][ T8633] Cannot create hsr debugfs directory
[  663.765734][   T55] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.871108][ T8445] veth0_macvtap: entered promiscuous mode
[  664.353729][   T55] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  664.479514][ T8445] veth1_macvtap: entered promiscuous mode
[  664.984844][ T5586] Bluetooth: hci1: command tx timeout
[  665.040397][ T8681] bridge0: port 1(bridge_slave_0) entered blocking state
[  665.048943][ T8681] bridge0: port 1(bridge_slave_0) entered disabled state
[  665.059626][ T8681] bridge_slave_0: entered allmulticast mode
[  665.070771][ T8681] bridge_slave_0: entered promiscuous mode
[  665.239623][ T8681] bridge0: port 2(bridge_slave_1) entered blocking state
[  665.251610][ T8681] bridge0: port 2(bridge_slave_1) entered disabled state
[  665.272288][ T8681] bridge_slave_1: entered allmulticast mode
[  665.284281][ T8681] bridge_slave_1: entered promiscuous mode
[  665.858591][ T8681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  666.022196][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_0
[  666.041288][ T8681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  666.131245][   T55] bridge_slave_1: left allmulticast mode
[  666.153255][   T55] bridge_slave_1: left promiscuous mode
[  666.159807][   T55] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.193066][   T55] bridge_slave_0: left allmulticast mode
[  666.204417][   T55] bridge_slave_0: left promiscuous mode
[  666.241204][   T55] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.509262][   T29] audit: type=1326 audit(1780431813.373:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.1.679" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdf01c code=0x0
[  666.915772][   T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  666.955889][   T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  666.987401][   T55] bond0 (unregistering): Released all slaves
[  667.168561][ T8681] team0: Port device team_slave_0 added
[  667.210454][ T8681] team0: Port device team_slave_1 added
[  667.518354][   T55] hsr_slave_0: left promiscuous mode
[  667.545302][   T55] hsr_slave_1: left promiscuous mode
[  667.565843][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  667.575613][   T55] batman_adv: batadv0: Removing interface: batadv_slave_0
[  667.591555][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  667.625388][   T55] batman_adv: batadv0: Removing interface: batadv_slave_1
[  667.682665][   T55] veth1_macvtap: left promiscuous mode
[  667.688444][   T55] veth0_macvtap: left promiscuous mode
[  667.714011][   T55] veth1_vlan: left promiscuous mode
[  667.719604][   T55] veth0_vlan: left promiscuous mode
[  668.776867][   T55] team0 (unregistering): Port device team_slave_1 removed
[  668.846909][   T55] team0 (unregistering): Port device team_slave_0 removed
[  669.267103][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_1
[  669.381627][ T8681] batman_adv: batadv0: Adding interface: batadv_slave_0
[  669.411269][ T8681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  669.464086][ T8681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  669.588101][ T8681] batman_adv: batadv0: Adding interface: batadv_slave_1
[  669.621699][ T8681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  669.716821][ T8681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  669.917354][ T1168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  669.942866][ T1168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  670.101478][ T1168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  670.135422][ T1146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  670.391396][ T8681] hsr_slave_0: entered promiscuous mode
[  670.418732][ T8681] hsr_slave_1: entered promiscuous mode
[  670.454239][ T8681] debugfs: 'hsr0' already exists in 'hsr'
[  670.484053][ T8681] Cannot create hsr debugfs directory
[  670.965536][ T8756] bridge0: port 1(bridge_slave_0) entered blocking state
[  670.973814][ T8756] bridge0: port 1(bridge_slave_0) entered disabled state
[  670.982875][ T8756] bridge_slave_0: entered allmulticast mode
[  670.997798][ T8756] bridge_slave_0: entered promiscuous mode
[  671.106729][ T8756] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.134268][ T8756] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.152602][ T8756] bridge_slave_1: entered allmulticast mode
[  671.193899][ T8756] bridge_slave_1: entered promiscuous mode
[  671.614189][ T8756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  671.649497][ T8633] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  671.679198][ T8633] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  671.911844][ T8756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  671.935893][ T8633] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  671.982162][ T8633] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  672.058360][ T8633] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  672.084404][ T5675] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  672.106886][ T8633] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  672.201291][ T8633] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  672.239883][ T5675] usb 2-1: Using ep0 maxpacket: 16
[  672.250071][ T8633] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  672.295656][ T5675] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  672.310289][ T5675] usb 2-1: config 0 has no interface number 0
[  672.326983][ T5675] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  672.365439][ T8756] team0: Port device team_slave_0 added
[  672.379906][ T5675] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  672.429230][ T5675] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  672.444799][ T5675] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.476558][ T5675] usb 2-1: Product: syz
[  672.492702][ T5675] usb 2-1: Manufacturer: syz
[  672.498004][ T8756] team0: Port device team_slave_1 added
[  672.519225][ T5675] usb 2-1: SerialNumber: syz
[  672.548767][ T5675] usb 2-1: config 0 descriptor??
[  672.573615][ T8883] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  672.608283][ T8883] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  672.874402][ T8756] batman_adv: batadv0: Adding interface: batadv_slave_0
[  672.884086][ T8756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  672.887087][ T8883] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  672.920876][ T8756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  672.981715][ T8883] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  673.031168][ T8756] batman_adv: batadv0: Adding interface: batadv_slave_1
[  673.044915][ T8756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  673.073365][ T8756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  673.232942][ T5675] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  673.655060][ T8756] hsr_slave_0: entered promiscuous mode
[  673.677934][ T8756] hsr_slave_1: entered promiscuous mode
[  673.697653][ T8756] debugfs: 'hsr0' already exists in 'hsr'
[  673.717752][ T8756] Cannot create hsr debugfs directory
[  674.081081][ T8681] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  674.145381][ T8681] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  674.271139][ T8681] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  674.303868][ T8681] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  674.381353][ T8681] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  674.443332][ T8681] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  674.464865][ T5675] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  674.490314][ T5675] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  674.511546][ T5675] asix 2-1:0.34: probe with driver asix failed with error -71
[  674.577522][ T5675] usb 2-1: USB disconnect, device number 81
[  674.594045][ T8681] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  674.650376][ T8681] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  675.763119][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  675.784775][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  675.985029][ T8633] 8021q: adding VLAN 0 to HW filter on device bond0
[  676.204425][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  676.225048][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  676.331155][ T8355] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  676.357356][ T8633] 8021q: adding VLAN 0 to HW filter on device team0
[  676.529513][ T8355] usb 2-1: Using ep0 maxpacket: 16
[  676.553334][ T8355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  676.565005][ T6230] bridge0: port 1(bridge_slave_0) entered blocking state
[  676.572607][ T6230] bridge0: port 1(bridge_slave_0) entered forwarding state
[  676.602793][ T8355] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  676.626568][ T8355] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  676.661459][ T8355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.705228][ T8355] usb 2-1: config 0 descriptor??
[  676.814079][  T784] bridge0: port 2(bridge_slave_1) entered blocking state
[  676.821711][  T784] bridge0: port 2(bridge_slave_1) entered forwarding state
[  676.860444][ T8756] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  676.938787][ T8756] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  676.960615][ T8756] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  677.009802][   T24] usb 2-1: USB disconnect, device number 82
[  677.024784][ T8756] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  677.046572][ T8756] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  677.171293][ T8930] fuse: Bad value for 'fd'
[  677.221257][ T8930] overlayfs: missing 'workdir'
[  677.353020][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'.
[  677.540349][ T8756] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  678.569838][ T8930] bridge_slave_1: left allmulticast mode
[  678.576123][ T8930] bridge_slave_1: left promiscuous mode
[  678.766804][ T8930] bridge0: port 2(bridge_slave_1) entered disabled state
[  679.581358][ T8930] bridge_slave_0: left allmulticast mode
[  679.609548][ T8930] bridge_slave_0: left promiscuous mode
[  679.627506][ T8930] bridge0: port 1(bridge_slave_0) entered disabled state
[  679.950185][ T8756] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  680.000320][ T8756] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  680.240138][ T8681] 8021q: adding VLAN 0 to HW filter on device bond0
[  680.650283][ T8681] 8021q: adding VLAN 0 to HW filter on device team0
[  680.853945][  T784] bridge0: port 1(bridge_slave_0) entered blocking state
[  680.861517][  T784] bridge0: port 1(bridge_slave_0) entered forwarding state
[  681.054908][ T6230] bridge0: port 2(bridge_slave_1) entered blocking state
[  681.062636][ T6230] bridge0: port 2(bridge_slave_1) entered forwarding state
[  681.145548][ T5682] usb 5-1: new low-speed USB device number 35 using dummy_hcd
[  681.348921][ T5682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  681.386943][ T5682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  681.429751][ T5682] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  681.441045][ T5682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  681.486639][ T5682] usb 5-1: config 0 descriptor??
[  682.196001][ T8958] netlink: 112 bytes leftover after parsing attributes in process `syz.4.686'.
[  682.811383][ T8756] 8021q: adding VLAN 0 to HW filter on device bond0
[  683.234623][ T8756] 8021q: adding VLAN 0 to HW filter on device team0
[  683.378469][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state
[  683.386052][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  683.515452][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state
[  683.523162][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  684.532362][ T5682] usbhid 5-1:0.0: can't add hid device: -71
[  684.586662][ T5682] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  684.672357][ T5682] usb 5-1: USB disconnect, device number 35
[  686.332911][ T8633] 8021q: adding VLAN 0 to HW filter on device batadv0
[  687.012786][ T5682] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  687.150856][ T5232] 8021q: adding VLAN 0 to HW filter on device eth19
[  687.165371][   T40] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  687.229584][ T5682] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  687.267038][ T5682] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  687.318954][ T5682] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  687.356638][   T40] usb 5-1: Using ep0 maxpacket: 16
[  687.375781][ T5682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.409209][   T40] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  687.443031][ T5682] usb 2-1: config 0 descriptor??
[  687.469550][   T40] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  687.538947][   T40] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  687.577314][ T5682] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  687.610827][   T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.709266][   T40] usb 5-1: config 0 descriptor??
[  688.012362][    T9] usb 5-1: USB disconnect, device number 36
[  688.118123][ T8681] 8021q: adding VLAN 0 to HW filter on device batadv0
[  689.054847][ T8633] veth0_vlan: entered promiscuous mode
[  689.253057][ T8633] veth1_vlan: entered promiscuous mode
[  689.308659][ T9031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  689.384272][ T8756] 8021q: adding VLAN 0 to HW filter on device batadv0
[  689.670308][ T8633] veth0_macvtap: entered promiscuous mode
[  689.748666][ T8633] veth1_macvtap: entered promiscuous mode
[  689.999782][ T8633] batman_adv: batadv0: Interface activated: batadv_slave_0
[  690.130727][ T8633] batman_adv: batadv0: Interface activated: batadv_slave_1
[  690.155020][    T9] usb 2-1: USB disconnect, device number 83
[  690.453233][   T34] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  690.478581][   T34] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  690.613239][   T34] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  690.653007][   T34] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  690.885790][ T9044] fuse: Bad value for 'fd'
[  690.943603][ T9044] overlayfs: missing 'workdir'
[  691.251422][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'.
[  693.348913][ T8681] veth0_vlan: entered promiscuous mode
[  693.538240][ T8681] veth1_vlan: entered promiscuous mode
[  693.966733][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.696'.
[  694.479216][ T8756] veth0_vlan: entered promiscuous mode
[  694.660685][ T8681] veth0_macvtap: entered promiscuous mode
[  694.796701][ T8756] veth1_vlan: entered promiscuous mode
[  694.857726][ T8681] veth1_macvtap: entered promiscuous mode
[  695.457648][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  695.474718][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  696.073385][ T8756] veth0_macvtap: entered promiscuous mode
[  696.098768][ T8681] batman_adv: batadv0: Interface activated: batadv_slave_0
[  696.180349][ T8756] veth1_macvtap: entered promiscuous mode
[  696.219844][ T8681] batman_adv: batadv0: Interface activated: batadv_slave_1
[  696.452620][ T1152] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  696.468898][ T1146] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  696.533242][ T8756] batman_adv: batadv0: Interface activated: batadv_slave_0
[  696.563278][ T1146] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  696.594040][ T1146] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  696.740016][ T8756] batman_adv: batadv0: Interface activated: batadv_slave_1
[  696.961180][ T1168] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  697.001731][   T34] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  697.055533][ T1146] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  697.081115][ T1146] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  697.387446][ T6169] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  697.567883][ T6169] usb 5-1: Using ep0 maxpacket: 16
[  697.602319][ T6169] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  697.632351][ T6169] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  697.694210][ T6169] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  697.735957][ T6169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.793476][ T6169] usb 5-1: config 0 descriptor??
[  698.096381][ T6169] usb 5-1: USB disconnect, device number 37
[  698.643572][ T9098] fuse: Bad value for 'fd'
[  698.669564][ T9098] overlayfs: missing 'workdir'
[  698.841976][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.700'.
[  700.236160][ T5688] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  700.464328][ T5688] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  700.518153][ T5688] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  700.602454][ T5688] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  700.647500][ T5688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  700.712175][ T5688] usb 5-1: config 0 descriptor??
[  700.836599][ T5688] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  701.608511][ T6230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  701.694283][ T6230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  702.037644][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  702.083788][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  703.612766][   T40] usb 5-1: USB disconnect, device number 38
[  704.474669][ T9160] fuse: Bad value for 'fd'
[  704.520629][ T9160] overlayfs: missing 'workdir'
[  704.825794][ T9165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'.
[  706.578171][   T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  706.586951][   T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  706.598666][   T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  706.613560][   T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  706.626303][   T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  706.797342][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  706.884971][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  707.410788][   T48] Bluetooth: Unexpected start frame (len 16)
[  707.417661][   T48] Bluetooth: Frame is too long (len 16, expected len 4)
[  707.543793][  T784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  707.551805][  T784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  707.558346][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  707.612844][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  708.035359][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  708.089988][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  708.302346][   T11] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  708.526722][   T11] usb 2-1: Using ep0 maxpacket: 16
[  708.566268][   T11] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  708.608848][   T11] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  708.674980][   T11] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  708.714345][   T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.728270][   T48] Bluetooth: hci5: command tx timeout
[  708.804058][   T11] usb 2-1: config 0 descriptor??
[  709.122887][   T40] usb 2-1: USB disconnect, device number 84
[  709.621410][ T8037] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  709.749493][ T9198] fuse: Bad value for 'fd'
[  709.811510][ T9198] overlayfs: missing 'workdir'
[  709.922559][ T8037] usb 9-1: Using ep0 maxpacket: 32
[  710.187930][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.709'.
[  710.663623][ T8037] usb 9-1: config 0 has an invalid interface number: 89 but max is 0
[  710.800674][   T48] Bluetooth: hci5: command tx timeout
[  710.852138][ T8037] usb 9-1: config 0 has no interface number 0
[  710.952947][ T8037] usb 9-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  711.001104][ T8037] usb 9-1: config 0 interface 89 has no altsetting 0
[  711.152467][ T8037] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  711.194008][ T8037] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.243756][ T8037] usb 9-1: Product: syz
[  711.266322][ T8037] usb 9-1: Manufacturer: syz
[  711.288312][ T1152] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  711.316295][ T8037] usb 9-1: SerialNumber: syz
[  711.412290][ T5586] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  711.425419][ T5586] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  711.435438][ T5586] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  711.460783][ T5586] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  711.475159][ T5586] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  711.515305][ T8037] usb 9-1: config 0 descriptor??
[  711.563794][ T8037] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  711.658307][ T8037] em28xx 9-1:0.89: Video interface 89 found:
[  711.692810][ T1152] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  712.122289][ T1152] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  712.184663][ T8037] em28xx 9-1:0.89: unknown em28xx chip ID (0)
[  712.412161][ T5688] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  712.471828][ T1152] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  712.620562][ T5688] usb 2-1: Using ep0 maxpacket: 32
[  712.692180][ T5688] usb 2-1: unable to get BOS descriptor or descriptor too short
[  712.753851][ T5688] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 48, changing to 7
[  712.837934][ T5688] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 174, changing to 7
[  712.886333][   T48] Bluetooth: hci5: command tx timeout
[  712.928775][ T5688] usb 2-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40
[  712.949984][ T5688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.958384][ T5688] usb 2-1: Product: syz
[  712.966107][ T5232] 8021q: adding VLAN 0 to HW filter on device eth20
[  712.972449][ T5688] usb 2-1: Manufacturer: syz
[  712.974393][ T8037] em28xx 9-1:0.89: failed to get i2c transfer status from bridge register (error=-5)
[  712.983440][ T5688] usb 2-1: SerialNumber: syz
[  713.085537][ T8037] em28xx 9-1:0.89: board has no eeprom
[  713.229845][ T8037] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67)
[  713.290058][ T8037] em28xx 9-1:0.89: analog set to bulk mode.
[  713.359146][ T5681] em28xx 9-1:0.89: Registering V4L2 extension
[  713.444336][ T8037] usb 9-1: USB disconnect, device number 2
[  713.468081][ T5688] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  713.506447][ T8037] em28xx 9-1:0.89: Disconnecting em28xx
[  713.544165][ T5688] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  713.602336][   T48] Bluetooth: hci2: command tx timeout
[  714.170926][ T5681] em28xx 9-1:0.89: Config register raw data: 0xffffffed
[  714.220581][ T5681] em28xx 9-1:0.89: AC97 chip type couldn't be determined
[  714.289533][ T5681] em28xx 9-1:0.89: No AC97 audio processor
[  714.341268][ T5681] usb 9-1: Decoder not found
[  714.398168][ T5681] em28xx 9-1:0.89: failed to create media graph
[  714.429515][   T11] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  714.443622][ T5681] em28xx 9-1:0.89: V4L2 device video103 deregistered
[  714.483888][ T1152] bridge_slave_1: left allmulticast mode
[  714.522224][ T1152] bridge_slave_1: left promiscuous mode
[  714.542633][ T5681] em28xx 9-1:0.89: Registering snapshot button...
[  714.581205][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state
[  714.605958][ T5681] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input32
[  714.653832][ T1152] bridge_slave_0: left allmulticast mode
[  714.698522][   T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  714.709226][ T5681] em28xx 9-1:0.89: Remote control support is not available for this card.
[  714.723126][ T1152] bridge_slave_0: left promiscuous mode
[  714.742055][   T11] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  714.767218][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state
[  714.799928][ T8037] em28xx 9-1:0.89: Closing input extension
[  714.835784][ T5688] usb 2-1: USB disconnect, device number 85
[  714.856507][ T8037] em28xx 9-1:0.89: Deregistering snapshot button
[  714.883984][   T11] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  714.945439][   T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.959427][   T48] Bluetooth: hci5: command tx timeout
[  715.092230][   T11] usb 5-1: config 0 descriptor??
[  715.133162][ T8037] em28xx 9-1:0.89: Freeing device
[  715.195991][   T11] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  715.619320][ T5688] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  715.678938][   T48] Bluetooth: hci2: command tx timeout
[  715.702388][ T8692] udevd[8692]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  715.907187][ T9230] fuse: Bad value for 'fd'
[  715.938307][ T5688] usb 2-1: Using ep0 maxpacket: 16
[  715.963326][ T9230] overlayfs: missing 'workdir'
[  716.490671][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.8.714'.
[  716.883008][ T5688] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  717.189694][ T5688] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  717.552413][ T5688] usb 2-1: config 0 interface 0 has no altsetting 0
[  717.757834][   T48] Bluetooth: hci2: command tx timeout
[  717.785418][ T5688] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  717.970313][ T5688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  718.731046][ T5688] usb 2-1: config 0 descriptor??
[  719.204881][ T5675] usb 5-1: USB disconnect, device number 39
[  719.271657][ T5688] usb 2-1: can't set config #0, error -71
[  719.285925][ T5688] usb 2-1: USB disconnect, device number 86
[  719.836558][   T48] Bluetooth: hci2: command tx timeout
[  719.939657][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  720.023621][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  720.043110][ T5675] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  720.051486][   T11] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  720.073015][ T1152] bond0 (unregistering): Released all slaves
[  720.228767][ T5675] usb 5-1: Using ep0 maxpacket: 16
[  720.246850][   T11] usb 2-1: Using ep0 maxpacket: 32
[  720.252994][ T5675] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  720.302561][   T11] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  720.311734][ T5675] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  720.333519][ T9230] bridge_slave_1: left allmulticast mode
[  720.344389][   T11] usb 2-1: config 0 has no interface number 0
[  720.351299][ T9230] bridge_slave_1: left promiscuous mode
[  720.369586][ T9230] bridge0: port 2(bridge_slave_1) entered disabled state
[  720.411852][ T5675] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  720.423375][   T11] usb 2-1: config 0 interface 12 has no altsetting 0
[  720.445854][ T5675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.482965][ T9230] bridge_slave_0: left allmulticast mode
[  720.489384][   T11] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  720.509698][   T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.521298][ T5675] usb 5-1: config 0 descriptor??
[  720.531094][ T9230] bridge_slave_0: left promiscuous mode
[  720.548543][   T11] usb 2-1: Product: syz
[  720.569111][   T11] usb 2-1: Manufacturer: syz
[  720.577415][ T9230] bridge0: port 1(bridge_slave_0) entered disabled state
[  720.582670][   T11] usb 2-1: SerialNumber: syz
[  720.628207][   T11] usb 2-1: config 0 descriptor??
[  721.957682][ T5232] 8021q: adding VLAN 0 to HW filter on device eth21
[  721.999859][ T1152] hsr_slave_0: left promiscuous mode
[  722.011777][ T1152] hsr_slave_1: left promiscuous mode
[  722.046822][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  722.068271][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0
[  722.094029][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  722.117240][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1
[  722.207314][ T1152] veth1_macvtap: left promiscuous mode
[  722.223516][ T1152] veth0_macvtap: left promiscuous mode
[  722.244113][ T1152] veth1_vlan: left promiscuous mode
[  722.262009][ T1152] veth0_vlan: left promiscuous mode
[  722.358937][   T11] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  722.388743][   T11] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  722.417199][   T11] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  722.460279][   T11] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  722.527571][   T11] usb 2-1: USB disconnect, device number 87
[  722.855578][ T8037] usb 5-1: USB disconnect, device number 40
[  723.558726][ T8037] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  723.775030][ T8037] usb 5-1: Using ep0 maxpacket: 16
[  723.847789][ T9270] fuse: Bad value for 'fd'
[  723.911505][ T9270] overlayfs: missing 'workdir'
[  724.038118][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.719'.
[  725.137285][ T8037] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  726.580096][ T8037] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  726.589587][ T8037] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  726.598889][ T8037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.625890][ T8037] usb 5-1: config 0 descriptor??
[  727.061116][ T1152] team0 (unregistering): Port device team_slave_1 removed
[  727.177726][ T8037] usb 5-1: can't set config #0, error -71
[  727.181995][ T1152] team0 (unregistering): Port device team_slave_0 removed
[  727.217975][ T8037] usb 5-1: USB disconnect, device number 41
[  727.543929][   T11] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  727.724256][   T11] usb 9-1: Using ep0 maxpacket: 32
[  727.754849][   T11] usb 9-1: config 0 has an invalid interface number: 89 but max is 0
[  727.793150][   T11] usb 9-1: config 0 has no interface number 0
[  727.817391][   T11] usb 9-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  727.849632][   T11] usb 9-1: config 0 interface 89 has no altsetting 0
[  727.883702][   T11] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  727.910650][   T11] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.944689][   T11] usb 9-1: Product: syz
[  727.971238][   T11] usb 9-1: Manufacturer: syz
[  727.990945][   T11] usb 9-1: SerialNumber: syz
[  728.042064][   T11] usb 9-1: config 0 descriptor??
[  728.132473][   T11] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  728.215613][   T11] em28xx 9-1:0.89: Video interface 89 found:
[  728.738641][   T11] em28xx 9-1:0.89: unknown em28xx chip ID (0)
[  729.056381][ T5232] 8021q: adding VLAN 0 to HW filter on device eth22
[  729.440720][   T11] em28xx 9-1:0.89: failed to get i2c transfer status from bridge register (error=-5)
[  729.463268][ T1152] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  729.489498][   T11] em28xx 9-1:0.89: board has no eeprom
[  729.583018][   T11] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67)
[  729.613764][   T40] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  729.634451][   T11] em28xx 9-1:0.89: analog set to bulk mode.
[  729.670199][ T9054] em28xx 9-1:0.89: Registering V4L2 extension
[  729.742659][   T11] usb 9-1: USB disconnect, device number 3
[  729.785456][   T11] em28xx 9-1:0.89: Disconnecting em28xx
[  729.845409][   T40] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  729.875608][ T1152] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  729.897423][   T40] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  729.943350][   T40] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  729.986692][   T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  730.057674][   T40] usb 5-1: config 0 descriptor??
[  730.103597][ T9054] em28xx 9-1:0.89: Config register raw data: 0xffffffed
[  730.153848][ T9054] em28xx 9-1:0.89: AC97 chip type couldn't be determined
[  730.182898][ T5675] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  730.186046][   T40] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  730.210972][ T9054] em28xx 9-1:0.89: No AC97 audio processor
[  730.287512][ T9054] usb 9-1: Decoder not found
[  730.307358][ T9054] em28xx 9-1:0.89: failed to create media graph
[  730.333819][ T9054] em28xx 9-1:0.89: V4L2 device video103 deregistered
[  730.360160][ T9054] em28xx 9-1:0.89: Registering snapshot button...
[  730.399261][ T9054] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input33
[  730.412603][ T5675] usb 2-1: Using ep0 maxpacket: 16
[  730.456765][ T5675] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  730.487608][ T9054] em28xx 9-1:0.89: Remote control support is not available for this card.
[  730.504483][ T5675] usb 2-1: config 0 interface 0 has no altsetting 0
[  730.519722][ T1152] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  730.540772][ T5675] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  730.563908][   T11] em28xx 9-1:0.89: Closing input extension
[  730.586677][   T11] em28xx 9-1:0.89: Deregistering snapshot button
[  730.601707][ T5675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  730.648583][ T5675] usb 2-1: config 0 descriptor??
[  730.746421][   T11] em28xx 9-1:0.89: Freeing device
[  730.752552][ T5675] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  731.159781][ T1152] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  731.652232][   T11] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  731.840482][   T11] usb 9-1: Using ep0 maxpacket: 16
[  731.889452][   T11] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  731.911798][ T1152] bridge_slave_1: left allmulticast mode
[  731.936480][ T1152] bridge_slave_1: left promiscuous mode
[  731.946368][   T11] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  731.972585][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state
[  731.996027][   T11] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  732.023172][ T1152] bridge_slave_0: left allmulticast mode
[  732.030904][   T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.046628][ T1152] bridge_slave_0: left promiscuous mode
[  732.074212][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state
[  732.799097][   T40] usb 5-1: USB disconnect, device number 42
[  732.823861][   T11] usbhid 9-1:128.0: can't add hid device: -71
[  732.842983][   T11] usbhid 9-1:128.0: probe with driver usbhid failed with error -71
[  732.929043][   T11] usb 9-1: USB disconnect, device number 4
[  733.131429][   T40] usb 2-1: USB disconnect, device number 88
[  733.243855][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  733.341431][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  733.384536][ T1152] bond0 (unregistering): Released all slaves
[  733.570097][   T11] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  733.608257][ T5232] 8021q: adding VLAN 0 to HW filter on device eth23
[  733.750712][   T11] usb 5-1: Using ep0 maxpacket: 32
[  733.767896][   T11] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  733.802410][   T11] usb 5-1: config 0 has no interface number 0
[  733.829460][   T11] usb 5-1: config 0 interface 12 has no altsetting 0
[  733.874229][   T11] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  733.904932][   T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.932474][   T11] usb 5-1: Product: syz
[  733.946325][   T11] usb 5-1: Manufacturer: syz
[  733.960961][   T11] usb 5-1: SerialNumber: syz
[  733.997922][   T11] usb 5-1: config 0 descriptor??
[  734.248386][ T9170] bridge0: port 1(bridge_slave_0) entered blocking state
[  734.302240][ T9170] bridge0: port 1(bridge_slave_0) entered disabled state
[  734.347487][ T9170] bridge_slave_0: entered allmulticast mode
[  734.354463][ T5675] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  734.374911][ T9170] bridge_slave_0: entered promiscuous mode
[  734.416085][ T9170] bridge0: port 2(bridge_slave_1) entered blocking state
[  734.462978][ T9170] bridge0: port 2(bridge_slave_1) entered disabled state
[  734.480612][ T9170] bridge_slave_1: entered allmulticast mode
[  734.522071][ T9170] bridge_slave_1: entered promiscuous mode
[  734.540726][ T5675] usb 9-1: Using ep0 maxpacket: 16
[  734.585880][ T5675] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  734.623490][ T5675] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  734.673357][ T5675] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  734.713093][ T5675] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  734.786336][ T5675] usb 9-1: config 0 descriptor??
[  735.066186][ T9347] fuse: Bad value for 'fd'
[  735.100768][ T9347] overlayfs: missing 'workdir'
[  735.203821][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'.
[  735.917861][   T40] usb 9-1: USB disconnect, device number 5
[  736.583634][   T11] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  736.591550][   T11] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  736.599297][   T11] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  736.607289][   T11] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  736.642365][ T9170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  736.803696][ T1152] hsr_slave_0: left promiscuous mode
[  736.856440][   T11] usb 5-1: USB disconnect, device number 43
[  736.876004][ T1152] hsr_slave_1: left promiscuous mode
[  736.929406][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  736.985246][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0
[  737.046994][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  737.080438][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1
[  737.185080][ T1152] veth1_macvtap: left promiscuous mode
[  737.234893][ T1152] veth0_macvtap: left promiscuous mode
[  737.264056][ T1152] veth1_vlan: left promiscuous mode
[  737.291922][ T1152] veth0_vlan: left promiscuous mode
[  737.778929][ T9357] overlayfs: failed to resolve '/ile0': -2
[  737.958612][ T5681] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  738.148084][ T5681] usb 5-1: Using ep0 maxpacket: 32
[  738.192363][ T5681] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  738.224521][ T5681] usb 5-1: config 0 has no interface number 0
[  738.245969][ T5681] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  738.292579][ T5681] usb 5-1: config 0 interface 89 has no altsetting 0
[  738.342866][ T5681] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  738.398488][ T5681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  738.418248][ T5681] usb 5-1: Product: syz
[  738.430537][ T5681] usb 5-1: Manufacturer: syz
[  738.466617][ T5681] usb 5-1: SerialNumber: syz
[  738.511978][ T5681] usb 5-1: config 0 descriptor??
[  738.595329][ T5681] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  738.648784][ T5681] em28xx 5-1:0.89: Video interface 89 found:
[  739.185091][ T5681] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[  739.188016][   T11] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  739.306730][ T5675] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  739.348100][ T1152] team0 (unregistering): Port device team_slave_1 removed
[  739.404605][ T1152] team0 (unregistering): Port device team_slave_0 removed
[  739.424241][   T11] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  739.438000][   T11] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  739.471250][   T11] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  739.497433][ T5675] usb 9-1: Using ep0 maxpacket: 16
[  739.503188][   T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  739.522782][ T5675] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  739.545596][   T11] usb 2-1: config 0 descriptor??
[  739.551836][ T5675] usb 9-1: config 0 interface 0 has no altsetting 0
[  739.569852][ T5675] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  739.597927][   T11] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  739.613694][ T5675] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  739.674879][ T5675] usb 9-1: config 0 descriptor??
[  739.739645][ T5675] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  739.860172][ T5681] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5)
[  739.890689][ T5681] em28xx 5-1:0.89: board has no eeprom
[  739.994340][ T5681] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[  739.997645][ T9170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  740.017784][ T5681] em28xx 5-1:0.89: analog set to bulk mode.
[  740.044039][   T40] em28xx 5-1:0.89: Registering V4L2 extension
[  740.097498][ T5681] usb 5-1: USB disconnect, device number 44
[  740.135908][ T5681] em28xx 5-1:0.89: Disconnecting em28xx
[  740.239422][ T5232] 8021q: adding VLAN 0 to HW filter on device eth24
[  740.342190][   T40] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[  740.362328][   T40] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[  740.392850][   T40] em28xx 5-1:0.89: No AC97 audio processor
[  740.444149][   T40] usb 5-1: Decoder not found
[  740.469715][   T40] em28xx 5-1:0.89: failed to create media graph
[  740.492520][   T40] em28xx 5-1:0.89: V4L2 device video103 deregistered
[  740.535214][   T40] em28xx 5-1:0.89: Registering snapshot button...
[  740.600779][   T40] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input34
[  740.669752][ T9170] team0: Port device team_slave_0 added
[  740.671258][   T40] em28xx 5-1:0.89: Remote control support is not available for this card.
[  740.770189][ T5681] em28xx 5-1:0.89: Closing input extension
[  740.786677][ T5681] em28xx 5-1:0.89: Deregistering snapshot button
[  740.799592][ T9170] team0: Port device team_slave_1 added
[  740.929940][ T5681] em28xx 5-1:0.89: Freeing device
[  741.049202][ T9203] bridge0: port 1(bridge_slave_0) entered blocking state
[  741.095812][ T9203] bridge0: port 1(bridge_slave_0) entered disabled state
[  741.153014][ T9203] bridge_slave_0: entered allmulticast mode
[  741.220499][ T9203] bridge_slave_0: entered promiscuous mode
[  741.322526][ T9203] bridge0: port 2(bridge_slave_1) entered blocking state
[  741.341872][ T9203] bridge0: port 2(bridge_slave_1) entered disabled state
[  741.366133][ T9203] bridge_slave_1: entered allmulticast mode
[  741.406681][ T9203] bridge_slave_1: entered promiscuous mode
[  741.695346][ T9170] batman_adv: batadv0: Adding interface: batadv_slave_0
[  741.706448][ T9170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  741.733901][ T9170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  741.840216][ T9170] batman_adv: batadv0: Adding interface: batadv_slave_1
[  741.851032][ T9170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  741.888610][ T9170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  742.029211][ T9203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  742.110641][ T9203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  742.202004][ T5675] usb 9-1: USB disconnect, device number 6
[  742.302380][   T11] usb 2-1: USB disconnect, device number 89
[  742.777578][ T9203] team0: Port device team_slave_0 added
[  742.866169][ T9170] hsr_slave_0: entered promiscuous mode
[  742.875798][ T9170] hsr_slave_1: entered promiscuous mode
[  742.884120][ T9170] debugfs: 'hsr0' already exists in 'hsr'
[  742.906967][ T9170] Cannot create hsr debugfs directory
[  742.909803][   T11] usb 2-1: new full-speed USB device number 90 using dummy_hcd
[  742.933913][ T9203] team0: Port device team_slave_1 added
[  743.081961][   T11] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  743.117021][   T11] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d
[  743.141043][   T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.179903][   T11] usb 2-1: Product: syz
[  743.204521][   T11] usb 2-1: Manufacturer: syz
[  743.225417][   T11] usb 2-1: SerialNumber: syz
[  743.281292][ T9203] batman_adv: batadv0: Adding interface: batadv_slave_0
[  743.294872][ T9203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  743.335114][ T9203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  743.631312][ T9402] fuse: Bad value for 'fd'
[  744.444376][ T9402] overlayfs: missing 'workdir'
[  744.469134][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.740'.
[  744.483594][   T11] usb 2-1: selecting invalid altsetting 1
[  744.876833][   T11] LME2510(C): Firmware Status: 00 00 00 00 00 00
[  744.895654][   T11] dvb_usb_lmedm04 2-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22
[  745.539859][ T9203] batman_adv: batadv0: Adding interface: batadv_slave_1
[  745.547180][ T9203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  745.591226][   T11] usb 2-1: USB disconnect, device number 90
[  745.597662][ T9203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  746.271814][ T9203] hsr_slave_0: entered promiscuous mode
[  746.288048][ T9203] hsr_slave_1: entered promiscuous mode
[  746.298838][ T9203] debugfs: 'hsr0' already exists in 'hsr'
[  746.313918][ T9203] Cannot create hsr debugfs directory
[  746.373284][ T5681] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  746.553918][ T5681] usb 2-1: Using ep0 maxpacket: 32
[  746.582222][ T5681] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  746.604134][ T5681] usb 2-1: config 0 has no interface number 0
[  746.631802][ T5681] usb 2-1: config 0 interface 12 has no altsetting 0
[  746.673730][ T5681] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  746.713033][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  746.753815][ T5681] usb 2-1: Product: syz
[  746.773563][ T5681] usb 2-1: Manufacturer: syz
[  746.795156][ T5681] usb 2-1: SerialNumber: syz
[  746.831573][ T5681] usb 2-1: config 0 descriptor??
[  747.142555][   T40] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  747.327407][   T40] usb 5-1: Using ep0 maxpacket: 16
[  747.365600][   T40] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  747.399784][   T40] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  747.422238][   T40] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  747.438731][   T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  747.484706][   T40] usb 5-1: config 0 descriptor??
[  747.962281][ T5685] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  748.136047][ T5685] usb 9-1: Using ep0 maxpacket: 16
[  748.170051][ T5685] usb 9-1: unable to get BOS descriptor or descriptor too short
[  748.210480][ T5685] usb 9-1: config 16 has an invalid interface number: 44 but max is 0
[  748.254189][ T5685] usb 9-1: config 16 has no interface number 0
[  748.278122][ T5685] usb 9-1: config 16 interface 44 has no altsetting 0
[  748.319231][ T5685] usb 9-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64
[  748.368153][ T5685] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.377423][ T5685] usb 9-1: Product: syz
[  748.405599][ T5685] usb 9-1: Manufacturer: syz
[  748.415970][ T5685] usb 9-1: SerialNumber: syz
[  748.530612][ T5681] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  748.590053][ T5681] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  748.622491][ T5586] Bluetooth: hci4: command 0x0406 tx timeout
[  748.645026][ T5681] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  748.653913][ T5681] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  748.677311][ T6169] usb 5-1: USB disconnect, device number 45
[  748.698187][ T5681] usb 2-1: USB disconnect, device number 91
[  748.829279][ T5685] cypress_cy7c63 9-1:16.44: Cypress CY7C63xxx device now attached
[  748.864385][ T5685] usb 9-1: USB disconnect, device number 7
[  748.926124][ T5685] cypress_cy7c63 9-1:16.44: Cypress CY7C63xxx device now disconnected
[  750.601788][ T9170] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  750.689124][ T9170] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  750.739050][ T9170] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  750.791548][ T5681] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  750.867904][ T9170] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  750.915984][ T9170] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  750.976248][ T5681] usb 5-1: Using ep0 maxpacket: 32
[  751.025440][ T5681] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  751.048976][ T9170] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  751.069787][ T5681] usb 5-1: config 0 has no interface number 0
[  751.106303][ T5681] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  751.158988][ T5681] usb 5-1: config 0 interface 89 has no altsetting 0
[  751.208036][ T5681] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  751.241549][ T5681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  751.269710][ T9170] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  751.291424][ T5681] usb 5-1: Product: syz
[  751.304535][ T5681] usb 5-1: Manufacturer: syz
[  751.309803][ T5681] usb 5-1: SerialNumber: syz
[  751.358621][ T5681] usb 5-1: config 0 descriptor??
[  751.391036][ T9170] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  751.488858][ T5681] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  751.557427][ T5681] em28xx 5-1:0.89: Video interface 89 found:
[  751.938913][ T9203] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  752.036746][ T9203] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  752.061946][ T5681] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[  752.084007][ T9203] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  752.147574][ T9203] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  752.187945][ T9203] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  752.242342][ T9203] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  752.273369][ T9203] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  752.296888][   T40] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  752.332642][ T9203] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  752.460818][   T40] usb 2-1: Using ep0 maxpacket: 16
[  752.505189][   T40] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  752.573042][   T40] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  752.698690][   T40] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  752.756199][   T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  752.804591][ T5681] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5)
[  752.851031][   T40] usb 2-1: config 0 descriptor??
[  752.887000][ T5681] em28xx 5-1:0.89: board has no eeprom
[  752.969760][   T40] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  753.024175][ T5681] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[  753.059457][ T5681] em28xx 5-1:0.89: analog set to bulk mode.
[  753.085818][ T8355] em28xx 5-1:0.89: Registering V4L2 extension
[  753.144056][ T5681] usb 5-1: USB disconnect, device number 46
[  753.192689][ T5681] em28xx 5-1:0.89: Disconnecting em28xx
[  753.485512][ T8355] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[  753.523828][ T8355] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[  753.568536][ T8355] em28xx 5-1:0.89: No AC97 audio processor
[  753.608765][ T8355] usb 5-1: Decoder not found
[  753.630031][ T8355] em28xx 5-1:0.89: failed to create media graph
[  753.678306][ T8355] em28xx 5-1:0.89: V4L2 device video103 deregistered
[  753.730258][ T8355] em28xx 5-1:0.89: Registering snapshot button...
[  753.766663][ T8355] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input35
[  753.812628][ T8355] em28xx 5-1:0.89: Remote control support is not available for this card.
[  753.847852][ T5681] em28xx 5-1:0.89: Closing input extension
[  753.882177][ T5681] em28xx 5-1:0.89: Deregistering snapshot button
[  753.997457][ T9468] fuse: Bad value for 'fd'
[  754.048841][ T9468] overlayfs: missing 'workdir'
[  754.330992][ T9170] 8021q: adding VLAN 0 to HW filter on device bond0
[  754.389299][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.8.750'.
[  755.025848][ T5681] em28xx 5-1:0.89: Freeing device
[  755.732171][ T9170] 8021q: adding VLAN 0 to HW filter on device team0
[  755.798699][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  755.806256][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  755.890954][   T40] usb 2-1: USB disconnect, device number 92
[  755.999543][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  756.007075][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  756.767785][   T11] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  756.796089][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  756.802798][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  756.959914][ T5685] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  756.968298][   T11] usb 2-1: Using ep0 maxpacket: 32
[  757.039350][   T11] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  757.060377][ T9203] 8021q: adding VLAN 0 to HW filter on device bond0
[  757.067762][   T11] usb 2-1: config 0 has no interface number 0
[  757.074338][   T11] usb 2-1: config 0 interface 12 has no altsetting 0
[  757.139508][   T11] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  757.187453][ T5685] usb 9-1: Using ep0 maxpacket: 16
[  757.194648][   T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.247797][ T5685] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  757.264784][   T11] usb 2-1: Product: syz
[  757.273536][   T11] usb 2-1: Manufacturer: syz
[  757.290428][ T5685] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  757.303870][   T11] usb 2-1: SerialNumber: syz
[  757.335344][ T5685] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  757.359588][   T11] usb 2-1: config 0 descriptor??
[  757.378626][ T9203] 8021q: adding VLAN 0 to HW filter on device team0
[  757.414423][ T5685] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.477329][ T5685] usb 9-1: config 0 descriptor??
[  757.597407][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state
[  757.605098][ T6281] bridge0: port 1(bridge_slave_0) entered forwarding state
[  757.805334][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state
[  757.812954][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state
[  757.932121][ T8355] usb 9-1: USB disconnect, device number 8
[  759.163459][   T11] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  759.221294][   T11] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  759.271617][   T11] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  759.294600][   T11] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  759.349060][ T9501] netlink: 'syz.8.755': attribute type 4 has an invalid length.
[  759.381578][   T11] usb 2-1: USB disconnect, device number 93
[  759.457334][ T9502] netlink: 'syz.8.755': attribute type 4 has an invalid length.
[  759.640273][ T6169] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  759.829050][ T6169] usb 5-1: Using ep0 maxpacket: 16
[  759.870384][ T6169] usb 5-1: unable to get BOS descriptor or descriptor too short
[  759.922864][ T6169] usb 5-1: config 16 has an invalid interface number: 44 but max is 0
[  759.961669][ T6169] usb 5-1: config 16 has no interface number 0
[  759.984463][ T6169] usb 5-1: config 16 interface 44 has no altsetting 0
[  760.051524][ T6169] usb 5-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64
[  760.116715][ T6169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.165344][ T6169] usb 5-1: Product: syz
[  760.191783][ T6169] usb 5-1: Manufacturer: syz
[  760.237493][ T6169] usb 5-1: SerialNumber: syz
[  760.572880][ T6169] cypress_cy7c63 5-1:16.44: Cypress CY7C63xxx device now attached
[  760.643970][ T6169] usb 5-1: USB disconnect, device number 47
[  760.684834][ T6169] cypress_cy7c63 5-1:16.44: Cypress CY7C63xxx device now disconnected
[  761.628016][ T9170] 8021q: adding VLAN 0 to HW filter on device batadv0
[  762.255170][ T6169] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  762.298850][ T8355] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  762.434683][ T6169] usb 5-1: Using ep0 maxpacket: 32
[  762.492328][ T6169] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  762.514102][ T8355] usb 2-1: Using ep0 maxpacket: 16
[  762.529605][ T6169] usb 5-1: config 0 has no interface number 0
[  762.548153][ T6169] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  762.568574][ T8355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  762.599977][ T6169] usb 5-1: config 0 interface 89 has no altsetting 0
[  762.626853][ T8355] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  762.698578][ T8355] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  762.723099][ T6169] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  762.752109][ T6169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  762.775667][ T8355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.796898][ T6169] usb 5-1: Product: syz
[  762.820164][ T6169] usb 5-1: Manufacturer: syz
[  762.837658][ T6169] usb 5-1: SerialNumber: syz
[  762.847158][ T8355] usb 2-1: config 0 descriptor??
[  762.910693][ T6169] usb 5-1: config 0 descriptor??
[  762.932949][ T8355] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  763.037672][ T6169] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  763.091494][ T6169] em28xx 5-1:0.89: Video interface 89 found:
[  763.715749][ T6169] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[  764.018619][ T9203] 8021q: adding VLAN 0 to HW filter on device batadv0
[  764.393915][ T6169] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5)
[  764.452994][ T6169] em28xx 5-1:0.89: board has no eeprom
[  764.579078][ T6169] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[  764.605767][ T6169] em28xx 5-1:0.89: analog set to bulk mode.
[  764.648443][   T11] em28xx 5-1:0.89: Registering V4L2 extension
[  764.703974][ T6169] usb 5-1: USB disconnect, device number 48
[  764.763839][ T6169] em28xx 5-1:0.89: Disconnecting em28xx
[  765.303686][   T11] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[  765.373332][   T11] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[  765.435335][   T11] em28xx 5-1:0.89: No AC97 audio processor
[  765.474957][ T5586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  765.482335][ T8355] usb 2-1: USB disconnect, device number 94
[  765.488767][   T11] usb 5-1: Decoder not found
[  765.522783][ T5586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  765.552610][ T5586] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  765.563592][   T11] em28xx 5-1:0.89: failed to create media graph
[  765.577738][ T5586] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  765.602059][ T5586] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  765.657621][   T11] em28xx 5-1:0.89: V4L2 device video103 deregistered
[  765.751614][   T11] em28xx 5-1:0.89: Registering snapshot button...
[  765.800113][   T11] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input36
[  765.886477][   T11] em28xx 5-1:0.89: Remote control support is not available for this card.
[  765.914787][ T6169] em28xx 5-1:0.89: Closing input extension
[  765.965699][ T6169] em28xx 5-1:0.89: Deregistering snapshot button
[  766.049975][ T9555] fuse: Bad value for 'fd'
[  766.117344][ T9555] overlayfs: missing 'workdir'
[  766.216496][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.8.761'.
[  767.317856][ T6169] em28xx 5-1:0.89: Freeing device
[  767.554531][ T8355] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  767.653287][   T48] Bluetooth: hci3: command tx timeout
[  767.817299][ T8355] usb 2-1: Using ep0 maxpacket: 16
[  767.873979][ T8355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  767.971059][ T8355] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  768.020094][ T8355] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  768.100762][ T8355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  768.160838][ T8355] usb 2-1: config 0 descriptor??
[  768.764642][ T6169] usb 2-1: USB disconnect, device number 95
[  769.731062][   T48] Bluetooth: hci3: command tx timeout
[  769.970969][ T8355] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  770.191801][ T8355] usb 9-1: Using ep0 maxpacket: 32
[  770.245167][ T8355] usb 9-1: config 0 has an invalid interface number: 12 but max is 0
[  770.287183][ T8355] usb 9-1: config 0 has no interface number 0
[  770.323067][ T8355] usb 9-1: config 0 interface 12 has no altsetting 0
[  770.389364][ T8355] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  770.442848][ T8355] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.486057][ T8355] usb 9-1: Product: syz
[  770.507653][ T8355] usb 9-1: Manufacturer: syz
[  770.544727][ T8355] usb 9-1: SerialNumber: syz
[  770.602604][ T8355] usb 9-1: config 0 descriptor??
[  771.337083][ T5586] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  771.352666][ T5586] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  771.365732][ T9237] bridge_slave_1: left allmulticast mode
[  771.371535][ T5586] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  771.408675][ T5586] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  771.421859][ T9237] bridge_slave_1: left promiscuous mode
[  771.429953][ T9237] bridge0: port 2(bridge_slave_1) entered disabled state
[  771.447842][ T5586] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  771.542500][ T9237] bridge_slave_0: left allmulticast mode
[  771.630719][ T9237] bridge_slave_0: left promiscuous mode
[  771.683181][ T9237] bridge0: port 1(bridge_slave_0) entered disabled state
[  771.810715][   T48] Bluetooth: hci3: command tx timeout
[  772.408398][ T8355] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  772.440048][ T8355] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71
[  772.488820][ T8355] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  772.540506][ T8355] f81534 9-1:0.12: probe with driver f81534 failed with error -71
[  772.658258][ T8355] usb 9-1: USB disconnect, device number 9
[  772.830946][  T996] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  773.016120][  T996] usb 2-1: Using ep0 maxpacket: 16
[  773.072862][  T996] usb 2-1: unable to get BOS descriptor or descriptor too short
[  773.129875][  T996] usb 2-1: config 16 has an invalid interface number: 44 but max is 0
[  773.144750][  T996] usb 2-1: config 16 has no interface number 0
[  773.182401][  T996] usb 2-1: config 16 interface 44 has no altsetting 0
[  773.226134][  T996] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64
[  773.255711][  T996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.283749][ T9237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  773.286083][  T996] usb 2-1: Product: syz
[  773.335655][ T9237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  773.344694][  T996] usb 2-1: Manufacturer: syz
[  773.357186][  T996] usb 2-1: SerialNumber: syz
[  773.403052][ T9237] bond0 (unregistering): Released all slaves
[  773.571697][   T48] Bluetooth: hci5: command tx timeout
[  773.715439][  T996] cypress_cy7c63 2-1:16.44: Cypress CY7C63xxx device now attached
[  773.783267][  T996] usb 2-1: USB disconnect, device number 96
[  773.826620][  T996] cypress_cy7c63 2-1:16.44: Cypress CY7C63xxx device now disconnected
[  773.889037][   T48] Bluetooth: hci3: command tx timeout
[  774.046623][ T9237] hsr_slave_0: left promiscuous mode
[  774.091155][ T9237] hsr_slave_1: left promiscuous mode
[  774.113363][ T9237] batman_adv: batadv0: Removing interface: batadv_slave_0
[  774.160239][ T9237] batman_adv: batadv0: Removing interface: batadv_slave_1
[  774.851954][   T11] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  774.928985][  T996] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  775.038667][   T11] usb 5-1: Using ep0 maxpacket: 32
[  775.100782][   T11] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  775.115345][   T11] usb 5-1: config 0 has no interface number 0
[  775.124109][  T996] usb 9-1: Using ep0 maxpacket: 16
[  775.134598][   T11] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  775.183522][   T11] usb 5-1: config 0 interface 89 has no altsetting 0
[  775.191040][  T996] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  775.191183][  T996] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  775.191409][  T996] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  775.191553][  T996] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.255282][  T996] usb 9-1: config 0 descriptor??
[  775.292763][  T996] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  775.422890][   T11] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  775.464886][   T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.501415][   T11] usb 5-1: Product: syz
[  775.512548][   T11] usb 5-1: Manufacturer: syz
[  775.573346][   T11] usb 5-1: SerialNumber: syz
[  775.607430][   T11] usb 5-1: config 0 descriptor??
[  775.648973][   T48] Bluetooth: hci5: command tx timeout
[  775.696262][   T11] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  775.741040][   T11] em28xx 5-1:0.89: Video interface 89 found:
[  775.803500][ T9237] team0 (unregistering): Port device team_slave_1 removed
[  775.902463][ T9237] team0 (unregistering): Port device team_slave_0 removed
[  776.333747][   T11] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[  776.995400][   T11] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5)
[  777.024184][   T11] em28xx 5-1:0.89: board has no eeprom
[  777.107349][   T11] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[  777.137782][   T11] em28xx 5-1:0.89: analog set to bulk mode.
[  777.174363][ T5685] em28xx 5-1:0.89: Registering V4L2 extension
[  777.234899][   T11] usb 5-1: USB disconnect, device number 49
[  777.268734][   T11] em28xx 5-1:0.89: Disconnecting em28xx
[  777.728500][ T5586] Bluetooth: hci5: command tx timeout
[  777.763307][ T5685] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[  777.815822][ T5685] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[  777.892105][ T8037] usb 9-1: USB disconnect, device number 10
[  777.926452][ T5685] em28xx 5-1:0.89: No AC97 audio processor
[  778.022978][ T5685] usb 5-1: Decoder not found
[  778.057607][ T5685] em28xx 5-1:0.89: failed to create media graph
[  778.109675][ T5685] em28xx 5-1:0.89: V4L2 device video103 deregistered
[  778.189248][ T5685] em28xx 5-1:0.89: Registering snapshot button...
[  778.262794][ T5685] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input37
[  778.314410][ T5685] em28xx 5-1:0.89: Remote control support is not available for this card.
[  778.376735][   T11] em28xx 5-1:0.89: Closing input extension
[  778.437585][   T11] em28xx 5-1:0.89: Deregistering snapshot button
[  778.617437][   T11] em28xx 5-1:0.89: Freeing device
[  778.835853][ T9642] fuse: Bad value for 'fd'
[  778.879494][ T8037] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  778.901113][ T9642] overlayfs: missing 'workdir'
[  779.148174][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.773'.
[  779.491642][ T5586] Bluetooth: hci1: command 0x0406 tx timeout
[  779.946392][ T5586] Bluetooth: hci5: command tx timeout
[  780.104972][ T8037] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  780.287747][ T8037] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  780.504057][ T8037] usb 9-1: Product: syz
[  780.580412][ T8037] usb 9-1: Manufacturer: syz
[  780.722681][ T8037] usb 9-1: SerialNumber: syz
[  783.304746][ T8037] usb 9-1: config 0 descriptor??
[  783.374822][    C1] raw-gadget.0 gadget.8: ignoring, device is not running
[  783.384636][ T8037] usb 9-1: can't set config #0, error -32
[  784.475497][ T8037] usb 9-1: USB disconnect, device number 11
[  786.434281][ T8037] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  786.602852][ T8037] usb 9-1: Using ep0 maxpacket: 16
[  786.636874][ T8037] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  786.687010][ T8037] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  786.729705][ T8037] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  786.791964][ T8037] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  786.847923][ T8037] usb 9-1: config 0 descriptor??
[  787.514529][   T24] usb 9-1: USB disconnect, device number 12
[  787.712003][ T9237] bridge_slave_1: left allmulticast mode
[  787.748174][ T9237] bridge_slave_1: left promiscuous mode
[  787.776443][ T9237] bridge0: port 2(bridge_slave_1) entered disabled state
[  787.830845][ T9237] bridge_slave_0: left allmulticast mode
[  787.867094][ T9237] bridge_slave_0: left promiscuous mode
[  787.893947][ T9237] bridge0: port 1(bridge_slave_0) entered disabled state
[  788.484041][ T8355] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  788.677303][ T8355] usb 5-1: Using ep0 maxpacket: 32
[  788.724717][ T8355] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  788.747467][ T8355] usb 5-1: config 0 has no interface number 0
[  788.762971][ T8355] usb 5-1: config 0 interface 12 has no altsetting 0
[  788.811155][ T8355] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  788.844120][ T8355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.875125][ T8355] usb 5-1: Product: syz
[  788.885968][ T8355] usb 5-1: Manufacturer: syz
[  788.893125][ T8355] usb 5-1: SerialNumber: syz
[  788.929077][ T8355] usb 5-1: config 0 descriptor??
[  788.997498][ T9237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  789.102392][ T9237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  789.210747][ T9237] bond0 (unregistering): Released all slaves
[  789.768455][ T9237] hsr_slave_0: left promiscuous mode
[  789.816270][ T9237] hsr_slave_1: left promiscuous mode
[  789.856534][ T9237] batman_adv: batadv0: Removing interface: batadv_slave_0
[  789.891795][ T9237] batman_adv: batadv0: Removing interface: batadv_slave_1
[  790.725336][ T8355] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  790.735654][ T8355] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  790.743749][ T8355] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  790.760735][ T8355] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  790.959868][ T8355] usb 5-1: USB disconnect, device number 50
[  791.621864][   T11] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  791.804050][   T11] usb 2-1: Using ep0 maxpacket: 16
[  791.841250][   T11] usb 2-1: unable to get BOS descriptor or descriptor too short
[  791.884135][   T11] usb 2-1: config 16 has an invalid interface number: 44 but max is 0
[  791.935576][   T11] usb 2-1: config 16 has no interface number 0
[  791.968487][   T11] usb 2-1: config 16 interface 44 has no altsetting 0
[  791.980478][ T8355] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  792.016181][   T11] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64
[  792.052994][   T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.064924][   T11] usb 2-1: Product: syz
[  792.069408][   T11] usb 2-1: Manufacturer: syz
[  792.081772][ T9237] team0 (unregistering): Port device team_slave_1 removed
[  792.093652][   T11] usb 2-1: SerialNumber: syz
[  792.165109][ T8355] usb 9-1: Using ep0 maxpacket: 16
[  792.174960][ T9237] team0 (unregistering): Port device team_slave_0 removed
[  792.214229][ T8355] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  792.255546][ T8355] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  792.298850][ T8355] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  792.358309][ T8355] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  792.415771][ T8355] usb 9-1: config 0 descriptor??
[  792.428101][   T11] cypress_cy7c63 2-1:16.44: Cypress CY7C63xxx device now attached
[  792.527134][ T8355] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  792.540969][   T11] usb 2-1: USB disconnect, device number 97
[  792.636039][   T11] cypress_cy7c63 2-1:16.44: Cypress CY7C63xxx device now disconnected
[  793.146142][ T9702] fuse: Bad value for 'fd'
[  793.198958][ T9702] overlayfs: missing 'workdir'
[  793.586093][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.784'.
[  796.136678][ T6169] usb 9-1: USB disconnect, device number 13
[  796.389694][ T9714] fuse: Bad value for 'fd'
[  796.443752][ T9714] overlayfs: missing 'workdir'
[  797.421356][ T9552] bridge0: port 1(bridge_slave_0) entered blocking state
[  797.455719][ T9552] bridge0: port 1(bridge_slave_0) entered disabled state
[  797.511060][ T9552] bridge_slave_0: entered allmulticast mode
[  797.702910][ T9552] bridge_slave_0: entered promiscuous mode
[  798.907422][ T9552] bridge0: port 2(bridge_slave_1) entered blocking state
[  798.978874][   T11] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  799.082003][ T9552] bridge0: port 2(bridge_slave_1) entered disabled state
[  799.121357][ T9552] bridge_slave_1: entered allmulticast mode
[  799.143977][ T9552] bridge_slave_1: entered promiscuous mode
[  799.176954][   T11] usb 9-1: Using ep0 maxpacket: 16
[  799.206351][   T11] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  799.246452][   T11] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  799.298290][   T11] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  799.334649][   T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  799.417523][   T11] usb 9-1: config 0 descriptor??
[  799.692456][ T9552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  799.830448][ T9552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  799.988086][ T8354] usb 9-1: USB disconnect, device number 14
[  800.192626][ T9552] team0: Port device team_slave_0 added
[  800.282473][ T9552] team0: Port device team_slave_1 added
[  800.635902][ T8354] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  800.684397][ T9552] batman_adv: batadv0: Adding interface: batadv_slave_0
[  800.759887][ T9552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  800.878364][ T9552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  800.919072][ T9552] batman_adv: batadv0: Adding interface: batadv_slave_1
[  800.934604][ T9552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  800.983719][ T8354] usb 5-1: Using ep0 maxpacket: 32
[  800.996151][ T8354] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  801.005678][ T8354] usb 5-1: config 0 has no interface number 0
[  801.013124][ T8354] usb 5-1: config 0 interface 12 has no altsetting 0
[  801.069025][ T8354] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  801.125982][ T9552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  801.164666][ T8354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  801.261420][ T8354] usb 5-1: Product: syz
[  801.282497][ T8354] usb 5-1: Manufacturer: syz
[  801.303812][ T8354] usb 5-1: SerialNumber: syz
[  801.361097][ T8354] usb 5-1: config 0 descriptor??
[  801.730708][ T9552] hsr_slave_0: entered promiscuous mode
[  801.780173][ T9552] hsr_slave_1: entered promiscuous mode
[  801.800096][ T9552] debugfs: 'hsr0' already exists in 'hsr'
[  801.827764][ T9552] Cannot create hsr debugfs directory
[  802.209800][ T9593] bridge0: port 1(bridge_slave_0) entered blocking state
[  802.245779][ T9593] bridge0: port 1(bridge_slave_0) entered disabled state
[  802.301674][ T9593] bridge_slave_0: entered allmulticast mode
[  802.328946][ T9593] bridge_slave_0: entered promiscuous mode
[  802.352285][ T9593] bridge0: port 2(bridge_slave_1) entered blocking state
[  802.360756][ T9593] bridge0: port 2(bridge_slave_1) entered disabled state
[  802.402526][ T9593] bridge_slave_1: entered allmulticast mode
[  802.420753][ T9593] bridge_slave_1: entered promiscuous mode
[  802.436529][ T6169] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  802.630291][ T6169] usb 2-1: Using ep0 maxpacket: 16
[  802.654892][   T11] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  802.691266][ T6169] usb 2-1: unable to get BOS descriptor or descriptor too short
[  802.711500][ T6169] usb 2-1: config 16 has an invalid interface number: 44 but max is 0
[  802.731076][ T6169] usb 2-1: config 16 has no interface number 0
[  802.742235][ T6169] usb 2-1: config 16 interface 44 has no altsetting 0
[  802.770496][ T6169] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64
[  802.808392][ T6169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  802.827886][ T9593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  802.851594][ T6169] usb 2-1: Product: syz
[  802.870111][   T11] usb 9-1: Using ep0 maxpacket: 16
[  802.875872][ T6169] usb 2-1: Manufacturer: syz
[  802.890099][ T6169] usb 2-1: SerialNumber: syz
[  802.908153][   T11] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  802.932400][   T11] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  802.958997][   T11] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  802.968886][   T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  803.027614][   T11] usb 9-1: config 0 descriptor??
[  803.120359][   T11] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  803.128945][ T8354] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  803.166735][ T8354] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  803.194637][ T8354] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  803.235527][ T8354] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  803.281977][ T6169] cypress_cy7c63 2-1:16.44: Cypress CY7C63xxx device now attached
[  803.318792][ T6169] usb 2-1: USB disconnect, device number 98
[  803.329571][ T6169] cypress_cy7c63 2-1:16.44: Cypress CY7C63xxx device now disconnected
[  803.338550][ T9593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  803.367385][ T8354] usb 5-1: USB disconnect, device number 51
[  803.736390][ T9593] team0: Port device team_slave_0 added
[  803.839915][ T9593] team0: Port device team_slave_1 added
[  804.061390][ T9763] fuse: Bad value for 'fd'
[  804.124215][ T9763] overlayfs: missing 'workdir'
[  804.251724][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'.
[  804.444985][ T9593] batman_adv: batadv0: Adding interface: batadv_slave_0
[  804.482545][ T9593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  804.654186][ T9593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  804.836389][ T9593] batman_adv: batadv0: Adding interface: batadv_slave_1
[  804.892263][ T9593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  805.068499][ T9593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  806.475561][ T6169] usb 9-1: USB disconnect, device number 15
[  807.402686][ T9593] hsr_slave_0: entered promiscuous mode
[  807.438993][ T9593] hsr_slave_1: entered promiscuous mode
[  807.492389][ T9593] debugfs: 'hsr0' already exists in 'hsr'
[  807.526858][ T9593] Cannot create hsr debugfs directory
[  807.686181][ T9785] fuse: Bad value for 'fd'
[  807.735248][ T9785] overlayfs: missing 'workdir'
[  811.140378][ T6169] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  811.301974][ T6169] usb 9-1: Using ep0 maxpacket: 16
[  811.349061][ T6169] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  811.411632][ T6169] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  811.452758][ T6169] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  811.486758][ T6169] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  811.609050][ T6169] usb 9-1: config 0 descriptor??
[  811.723703][ T9797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.801'.
[  812.009528][   T24] usb 9-1: USB disconnect, device number 16
[  812.412420][ T9552] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  812.520450][ T9552] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  812.644032][ T9552] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  812.678524][ T9552] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  812.720975][ T6169] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  812.758621][ T9552] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  812.812242][   T11] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  812.842956][ T9552] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  812.859036][ T9552] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  812.900617][ T6169] usb 2-1: Using ep0 maxpacket: 32
[  812.932106][ T9552] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  812.953078][ T6169] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  812.976418][ T6169] usb 2-1: config 0 has no interface number 0
[  813.016142][   T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  813.033564][ T6169] usb 2-1: config 0 interface 12 has no altsetting 0
[  813.098542][   T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  813.111830][ T6169] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  813.150269][ T6169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  813.256806][   T11] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  813.279524][ T6169] usb 2-1: Product: syz
[  813.284086][   T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  813.292523][ T6169] usb 2-1: Manufacturer: syz
[  813.297408][ T6169] usb 2-1: SerialNumber: syz
[  813.316495][   T11] usb 5-1: config 0 descriptor??
[  813.327960][ T6169] usb 2-1: config 0 descriptor??
[  814.081715][   T11] hid-thrustmaster 0003:044F:B65D.001B: unknown main item tag 0x0
[  814.110569][   T11] hid-thrustmaster 0003:044F:B65D.001B: unknown main item tag 0x0
[  814.152289][   T11] hid-thrustmaster 0003:044F:B65D.001B: unknown main item tag 0x0
[  814.180839][   T11] hid-thrustmaster 0003:044F:B65D.001B: unknown main item tag 0x0
[  814.195860][   T11] hid-thrustmaster 0003:044F:B65D.001B: unknown main item tag 0x0
[  814.224641][   T11] hid-thrustmaster 0003:044F:B65D.001B: unknown main item tag 0x0
[  814.263591][   T11] hid-thrustmaster 0003:044F:B65D.001B: unknown main item tag 0x0
[  814.352033][   T11] hid-thrustmaster 0003:044F:B65D.001B: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0
[  814.430286][   T11] hid-thrustmaster 0003:044F:B65D.001B: Wrong number of endpoints?
[  814.476707][    C0] hid-thrustmaster 0003:044F:B65D.001B: Unknown wheel's model id 0x0, unable to proceed further with wheel init
[  814.686945][   T24] usb 5-1: USB disconnect, device number 52
[  814.828760][ T9593] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  814.897592][ T9593] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  814.944785][ T9593] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  815.024525][ T9593] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  815.135251][ T9593] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  815.198431][ T8354] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  815.206569][ T9593] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  815.247789][ T6169] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  815.260112][ T9593] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  815.281331][ T6169] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  815.291587][ T6169] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  815.316393][ T9822] fido_id[9822]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  815.326624][ T6169] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  815.382732][ T9593] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  815.433269][ T6169] usb 2-1: USB disconnect, device number 99
[  815.473090][ T8354] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  815.538180][ T8354] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  815.573516][ T8354] usb 9-1: Product: syz
[  815.595794][ T8354] usb 9-1: Manufacturer: syz
[  815.652191][ T8354] usb 9-1: SerialNumber: syz
[  815.719057][ T8354] usb 9-1: config 0 descriptor??
[  816.240350][ T9552] 8021q: adding VLAN 0 to HW filter on device bond0
[  816.660479][ T9552] 8021q: adding VLAN 0 to HW filter on device team0
[  816.812287][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state
[  816.819980][ T6281] bridge0: port 1(bridge_slave_0) entered forwarding state
[  816.993109][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[  817.000865][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[  817.151369][ T9845] fuse: Bad value for 'fd'
[  817.229938][ T9845] overlayfs: missing 'workdir'
[  817.593938][ T9845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.810'.
[  818.204635][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  818.211638][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  819.657183][ T9552] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  819.703513][ T9552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  819.916793][ T9811] usb 9-1: USB disconnect, device number 17
[  820.740586][ T9593] 8021q: adding VLAN 0 to HW filter on device bond0
[  821.254633][ T9593] 8021q: adding VLAN 0 to HW filter on device team0
[  821.453655][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.461511][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  821.736751][ T6281] bridge0: port 2(bridge_slave_1) entered blocking state
[  821.744381][ T6281] bridge0: port 2(bridge_slave_1) entered forwarding state
[  822.976801][ T9409] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  823.180500][ T9409] usb 2-1: Using ep0 maxpacket: 32
[  823.245783][ T9409] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  823.292174][ T9409] usb 2-1: config 0 has no interface number 0
[  823.337246][ T9409] usb 2-1: config 0 interface 12 has no altsetting 0
[  823.415883][ T9409] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  823.473001][ T9409] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  823.519929][ T9409] usb 2-1: Product: syz
[  823.544606][ T9409] usb 2-1: Manufacturer: syz
[  823.585778][ T9409] usb 2-1: SerialNumber: syz
[  823.626673][ T9409] usb 2-1: config 0 descriptor??
[  825.354681][ T9810] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  825.424301][ T9409] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  825.461862][ T9409] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  825.491013][ T9409] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  825.542776][ T9409] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  825.614164][ T9908] fuse: Bad value for 'fd'
[  825.721333][ T9908] overlayfs: missing 'workdir'
[  825.931034][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.8.821'.
[  826.782662][ T9409] usb 2-1: USB disconnect, device number 100
[  827.104865][ T9810] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  827.289625][ T9810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  827.423928][ T9810] usb 5-1: Product: syz
[  827.498122][ T9810] usb 5-1: Manufacturer: syz
[  827.601666][ T9810] usb 5-1: SerialNumber: syz
[  827.757872][ T9599] udevd[9599]: setting mode of /dev/bus/usb/002/100 to 020664 failed: No such file or directory
[  827.961926][ T9599] udevd[9599]: setting owner of /dev/bus/usb/002/100 to uid=0, gid=0 failed: No such file or directory
[  829.933721][ T9810] usb 5-1: config 0 descriptor??
[  829.951226][ T9810] usb 5-1: can't set config #0, error -71
[  829.960093][ T9810] usb 5-1: USB disconnect, device number 53
[  830.040112][ T5586] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  830.051151][ T5586] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  830.062479][ T5586] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  830.135033][ T5586] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  830.172890][ T5586] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  831.519283][ T9928] netlink: 24 bytes leftover after parsing attributes in process `syz.4.823'.
[  832.260927][   T48] Bluetooth: hci2: command tx timeout
[  832.962586][ T5586] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  832.985206][ T5586] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  833.004734][ T5586] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  833.043995][ T5586] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  833.077888][ T5586] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  834.340379][ T5586] Bluetooth: hci2: command tx timeout
[  834.624768][ T8354] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  834.849665][ T8354] usb 5-1: Using ep0 maxpacket: 32
[  834.883115][ T8037] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  834.931317][ T8354] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  834.977749][ T8354] usb 5-1: config 0 has no interface number 0
[  835.026486][ T8354] usb 5-1: config 0 interface 12 has no altsetting 0
[  835.063503][ T8354] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  835.095938][ T8354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.138551][ T5586] Bluetooth: hci6: command tx timeout
[  835.176143][ T8354] usb 5-1: Product: syz
[  835.214600][ T8037] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  835.227663][ T8354] usb 5-1: Manufacturer: syz
[  835.254522][ T8354] usb 5-1: SerialNumber: syz
[  835.268881][ T8037] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.306445][ T8354] usb 5-1: config 0 descriptor??
[  835.318145][ T8037] usb 9-1: Product: syz
[  835.342237][ T8037] usb 9-1: Manufacturer: syz
[  835.389192][ T8037] usb 9-1: SerialNumber: syz
[  835.692310][ T8037] usb 9-1: config 0 descriptor??
[  836.421666][ T5586] Bluetooth: hci2: command tx timeout
[  836.842001][ T1152] bridge_slave_1: left allmulticast mode
[  836.894876][ T1152] bridge_slave_1: left promiscuous mode
[  836.921202][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state
[  837.016094][ T1152] bridge_slave_0: left allmulticast mode
[  837.037405][ T1152] bridge_slave_0: left promiscuous mode
[  837.045872][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state
[  837.217637][ T5586] Bluetooth: hci6: command tx timeout
[  837.245635][ T9986] fuse: Bad value for 'fd'
[  837.312675][ T9986] overlayfs: missing 'workdir'
[  837.649460][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.833'.
[  838.397341][ T8354] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  838.864674][ T5586] Bluetooth: hci2: command tx timeout
[  839.353958][ T8354] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  839.361809][ T8354] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  839.369889][ T8354] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  839.389036][ T8354] usb 5-1: USB disconnect, device number 54
[  839.413218][ T5586] Bluetooth: hci6: command tx timeout
[  839.641827][ T5685] usb 9-1: USB disconnect, device number 18
[  840.067603][ T9993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.834'.
[  840.512594][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  840.568654][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  840.600498][ T1152] bond0 (unregistering): Released all slaves
[  841.311549][ T1152] hsr_slave_0: left promiscuous mode
[  841.342720][ T1152] hsr_slave_1: left promiscuous mode
[  841.380239][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0
[  841.432532][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1
[  841.461027][ T5586] Bluetooth: hci6: command tx timeout
[  843.762010][ T9811] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  844.243758][ T9811] usb 2-1: Using ep0 maxpacket: 32
[  844.302711][ T9811] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  844.348793][ T9811] usb 2-1: config 0 has no interface number 0
[  844.369742][ T9811] usb 2-1: config 0 interface 12 has no altsetting 0
[  844.468141][ T1152] team0 (unregistering): Port device team_slave_1 removed
[  844.481458][ T9811] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  844.526641][ T9811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  844.565436][ T9811] usb 2-1: Product: syz
[  844.581403][ T9811] usb 2-1: Manufacturer: syz
[  844.602772][ T9811] usb 2-1: SerialNumber: syz
[  844.710019][ T9811] usb 2-1: config 0 descriptor??
[  844.729989][ T1152] team0 (unregistering): Port device team_slave_0 removed
[  845.263703][T10038] fuse: Bad value for 'fd'
[  845.324385][T10038] overlayfs: missing 'workdir'
[  847.580266][ T9811] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  847.616570][ T9811] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  847.624485][ T9811] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  847.632642][ T9811] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  847.658900][ T9811] usb 2-1: USB disconnect, device number 101
[  847.779432][T10043] netlink: 24 bytes leftover after parsing attributes in process `syz.8.846'.
[  852.168392][T10095] fuse: Bad value for 'fd'
[  852.244996][T10095] overlayfs: missing 'workdir'
[  854.763107][ T1152] bridge_slave_1: left allmulticast mode
[  854.769880][ T1152] bridge_slave_1: left promiscuous mode
[  854.782367][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state
[  854.820628][T10100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.856'.
[  854.845777][ T1152] bridge_slave_0: left allmulticast mode
[  854.861736][ T1152] bridge_slave_0: left promiscuous mode
[  854.893361][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state
[  855.158951][ T9811] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  855.319394][ T9811] usb 9-1: Using ep0 maxpacket: 32
[  855.343881][ T9811] usb 9-1: config 0 has an invalid interface number: 12 but max is 0
[  855.389522][ T9811] usb 9-1: config 0 has no interface number 0
[  855.407171][ T9811] usb 9-1: config 0 interface 12 has no altsetting 0
[  855.483714][ T9811] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  855.510818][ T9811] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.525943][ T9811] usb 9-1: Product: syz
[  855.547168][ T9811] usb 9-1: Manufacturer: syz
[  855.556070][ T9811] usb 9-1: SerialNumber: syz
[  855.625824][ T9811] usb 9-1: config 0 descriptor??
[  856.118140][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  856.194847][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  856.266862][ T1152] bond0 (unregistering): Released all slaves
[  856.478368][ T9916] bridge0: port 1(bridge_slave_0) entered blocking state
[  856.519112][ T9916] bridge0: port 1(bridge_slave_0) entered disabled state
[  856.561688][ T9916] bridge_slave_0: entered allmulticast mode
[  856.595110][ T9916] bridge_slave_0: entered promiscuous mode
[  856.816711][ T9916] bridge0: port 2(bridge_slave_1) entered blocking state
[  856.861459][ T9916] bridge0: port 2(bridge_slave_1) entered disabled state
[  856.870413][ T9916] bridge_slave_1: entered allmulticast mode
[  856.883563][ T9916] bridge_slave_1: entered promiscuous mode
[  857.165480][ T1152] hsr_slave_0: left promiscuous mode
[  857.199430][ T1152] hsr_slave_1: left promiscuous mode
[  857.220457][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0
[  857.244708][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1
[  857.380349][ T9811] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  857.407451][ T9811] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71
[  857.423504][ T9811] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  857.446005][ T9811] f81534 9-1:0.12: probe with driver f81534 failed with error -71
[  857.523774][ T9811] usb 9-1: USB disconnect, device number 19
[  858.911722][ T1152] team0 (unregistering): Port device team_slave_1 removed
[  858.993550][ T1152] team0 (unregistering): Port device team_slave_0 removed
[  859.754843][T10144] fuse: Bad value for 'fd'
[  859.820041][T10144] overlayfs: missing 'workdir'
[  862.206373][T10148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.868'.
[  862.296598][ T9916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  862.415323][ T9916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  862.801613][ T9916] team0: Port device team_slave_0 added
[  862.899585][ T9916] team0: Port device team_slave_1 added
[  863.315111][ T9916] batman_adv: batadv0: Adding interface: batadv_slave_0
[  863.332635][ T9916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  863.365349][ T9810] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[  863.397369][ T9916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  863.419168][ T9916] batman_adv: batadv0: Adding interface: batadv_slave_1
[  863.435912][ T9916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  863.500728][ T9916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  863.546799][ T9810] usb 2-1: Using ep0 maxpacket: 32
[  863.572985][ T9810] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  863.616106][ T9810] usb 2-1: config 0 has no interface number 0
[  863.648802][ T9810] usb 2-1: config 0 interface 12 has no altsetting 0
[  863.685914][ T9810] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  863.721581][ T9810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.750457][ T9810] usb 2-1: Product: syz
[  863.759189][ T9810] usb 2-1: Manufacturer: syz
[  863.788084][ T9810] usb 2-1: SerialNumber: syz
[  863.811385][ T9810] usb 2-1: config 0 descriptor??
[  863.823064][ T9945] bridge0: port 1(bridge_slave_0) entered blocking state
[  863.838194][ T9945] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.855041][ T9945] bridge_slave_0: entered allmulticast mode
[  863.942380][ T9945] bridge_slave_0: entered promiscuous mode
[  864.673989][ T9945] bridge0: port 2(bridge_slave_1) entered blocking state
[  864.747927][ T9945] bridge0: port 2(bridge_slave_1) entered disabled state
[  864.757618][ T9945] bridge_slave_1: entered allmulticast mode
[  864.777034][ T9945] bridge_slave_1: entered promiscuous mode
[  864.980713][ T9916] hsr_slave_0: entered promiscuous mode
[  865.015746][ T9916] hsr_slave_1: entered promiscuous mode
[  865.025370][ T9916] debugfs: 'hsr0' already exists in 'hsr'
[  865.042021][ T9916] Cannot create hsr debugfs directory
[  865.440643][ T9945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  865.594524][ T9810] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  865.618864][ T9810] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  865.666491][ T9810] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  865.696560][ T9810] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  865.792405][ T9810] usb 2-1: USB disconnect, device number 102
[  865.809398][ T9945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  865.975166][ T5682] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  866.170552][ T9945] team0: Port device team_slave_0 added
[  866.196931][ T5682] usb 5-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  866.221755][ T5682] usb 5-1: config 1 interface 0 has no altsetting 0
[  866.281142][ T9945] team0: Port device team_slave_1 added
[  866.293352][ T5682] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  866.310182][ T5682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.345264][ T5682] usb 5-1: Product: 猉꯻ᚣꭗ踱ꦝ뭠喨荕굨霥뤉䭏䧋ꤩ棫毟ᤚ䝆濴纆ᴙ덳搌⎗覑㗪껯萔鹡焲⟦˅匨ऻ䚻⴨ﴳﲔ무몯잱㈍뭿ꠚ½큂䓤된鹊ⰴ﫫俵D隚붐斴셖웦꘾냀㕖↨ꊋ▖ꁦⷂ︣챛໻ꉝ쀻샴￪鮡띜ꔒ탲︺肣ޢ뷁†瓍䌑뼂せ赮⿲伵闋謺芪쳃诼•
[  866.435473][ T5682] usb 5-1: Manufacturer: 㠁
[  866.450863][ T5682] usb 5-1: SerialNumber: а
[  866.480178][T10176] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  866.645517][T10181] fuse: Bad value for 'fd'
[  869.583954][T10181] overlayfs: missing 'workdir'
[  870.001945][ T9945] batman_adv: batadv0: Adding interface: batadv_slave_0
[  870.091016][ T9945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  870.359310][ T9945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  870.662191][ T9945] batman_adv: batadv0: Adding interface: batadv_slave_1
[  870.748262][ T9945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  870.902509][ T9945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  871.127425][ T5682] usb 5-1: USB disconnect, device number 55
[  871.558291][T10189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.880'.
[  871.784035][ T9945] hsr_slave_0: entered promiscuous mode
[  871.825939][ T9945] hsr_slave_1: entered promiscuous mode
[  871.846793][ T9945] debugfs: 'hsr0' already exists in 'hsr'
[  871.879569][ T9945] Cannot create hsr debugfs directory
[  873.550516][T10210] overlayfs: missing 'lowerdir'
[  875.040237][ T5682] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  875.114603][ T9916] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  875.187858][ T9916] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  875.227601][ T5682] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  875.252581][ T9916] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  875.272399][ T5682] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  875.306734][ T5682] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  875.332376][ T9916] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  875.341494][ T5682] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  875.419388][ T5682] usb 9-1: config 0 descriptor??
[  875.467476][ T9916] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  875.557465][ T9916] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  875.604236][ T9916] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  875.729281][ T9916] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  875.961249][T10221] fuse: Bad value for 'fd'
[  876.005402][T10221] overlayfs: missing 'workdir'
[  876.158233][ T5682] hid-thrustmaster 0003:044F:B65D.001C: unknown main item tag 0x0
[  876.252195][ T5682] hid-thrustmaster 0003:044F:B65D.001C: unknown main item tag 0x0
[  876.356256][ T5682] hid-thrustmaster 0003:044F:B65D.001C: unknown main item tag 0x0
[  876.459644][ T5682] hid-thrustmaster 0003:044F:B65D.001C: unknown main item tag 0x0
[  876.589050][ T5682] hid-thrustmaster 0003:044F:B65D.001C: unknown main item tag 0x0
[  876.738458][ T5682] hid-thrustmaster 0003:044F:B65D.001C: unknown main item tag 0x0
[  876.850431][ T5682] hid-thrustmaster 0003:044F:B65D.001C: unknown main item tag 0x0
[  878.239750][ T5682] hid-thrustmaster 0003:044F:B65D.001C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.8-1/input0
[  878.267195][ T5682] hid-thrustmaster 0003:044F:B65D.001C: Wrong number of endpoints?
[  878.643971][    C1] hid-thrustmaster 0003:044F:B65D.001C: URB to get model id failed with error -71
[  878.667682][ T8355] usb 9-1: USB disconnect, device number 20
[  879.432342][ T9945] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  879.457120][T10228] fido_id[10228]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  879.582685][ T9945] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  879.618500][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  879.622535][ T9945] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  879.630514][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  879.694057][ T9945] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  879.727808][ T9945] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  879.758655][ T9945] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  879.866178][ T9945] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  879.962027][ T9945] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  880.728283][ T9916] 8021q: adding VLAN 0 to HW filter on device bond0
[  881.101550][ T9916] 8021q: adding VLAN 0 to HW filter on device team0
[  881.272561][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state
[  881.280230][ T6281] bridge0: port 1(bridge_slave_0) entered forwarding state
[  881.421129][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state
[  881.428878][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  882.031780][T10248] kvm: pic: level sensitive irq not supported
[  882.032774][T10248] kvm: pic: non byte write
[  882.335810][ T8355] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[  882.504804][ T8355] usb 2-1: Using ep0 maxpacket: 8
[  882.577139][ T8355] usb 2-1: config 228 has an invalid interface number: 127 but max is 0
[  882.618367][ T8355] usb 2-1: config 228 has no interface number 0
[  882.699617][ T8355] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=88.8e
[  882.736741][ T8355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  882.791708][ T8355] usb 2-1: Product: syz
[  882.826570][ T8355] usb 2-1: Manufacturer: syz
[  882.831395][ T8355] usb 2-1: SerialNumber: syz
[  882.895521][ T9945] 8021q: adding VLAN 0 to HW filter on device bond0
[  883.181518][ T8355] empeg 2-1:228.127: empeg converter detected
[  883.207186][ T9945] 8021q: adding VLAN 0 to HW filter on device team0
[  883.227942][ T8355] usb 2-1: active config #228 != 1 ??
[  883.296628][ T8355] usb 2-1: USB disconnect, device number 103
[  883.305615][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state
[  883.313322][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state
[  883.494041][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[  883.501585][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[  883.639961][T10263] fuse: Bad value for 'fd'
[  883.654957][T10263] overlayfs: missing 'workdir'
[  886.461237][ T5685] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[  886.834502][ T5685] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  886.961541][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.056590][ T5685] usb 2-1: Product: syz
[  887.126010][ T5685] usb 2-1: Manufacturer: syz
[  887.150911][ T5685] usb 2-1: SerialNumber: syz
[  887.203315][ T5685] usb 2-1: config 0 descriptor??
[  887.672572][T10295] fuse: Bad value for 'fd'
[  888.277504][ T5685] usb 2-1: Firmware version (0.0) predates our first public release.
[  889.792389][ T5685] usb 2-1: Please update to version 0.2 or newer
[  890.043896][   T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  890.053334][   T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  890.062831][   T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  890.076448][   T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  890.089671][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  890.834759][T10310] fuse: Bad value for 'fd'
[  890.893075][T10310] overlayfs: missing 'workdir'
[  891.254949][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.909'.
[  892.535606][   T48] Bluetooth: hci3: command tx timeout
[  893.127876][T10318] =====================================================
[  893.135426][T10318] BUG: KMSAN: uninit-value in mptcp_established_options+0x112f/0x3530
[  893.144705][T10318]  mptcp_established_options+0x112f/0x3530
[  893.150977][T10318]  tcp_established_options+0x312/0xcc0
[  893.159960][T10318]  __tcp_transmit_skb+0x5dc/0x5fe0
[  893.167518][T10318]  __tcp_send_ack+0x967/0xad0
[  893.172515][T10318]  tcp_send_ack+0x3d/0x60
[  893.177103][T10318]  mptcp_subflow_shutdown+0x164/0x690
[  893.182860][T10318]  mptcp_check_send_data_fin+0x31b/0x3d0
[  893.188705][T10318]  __mptcp_close+0x860/0x1360
[  893.194216][T10318]  mptcp_close+0x42/0x260
[  893.198793][T10318]  inet_release+0x1ee/0x2a0
[  893.203802][T10318]  sock_close+0xd6/0x2f0
[  893.208281][T10318]  __fput+0x60e/0x1010
[  893.212737][T10318]  ____fput+0x25/0x30
[  893.216903][T10318]  task_work_run+0x208/0x2b0
[  893.222285][T10318]  exit_to_user_mode_loop+0x505/0x2420
[  893.228034][T10318]  __do_fast_syscall_32+0x2dc/0x470
[  893.233633][T10318]  do_fast_syscall_32+0x37/0x80
[  893.238671][T10318]  do_SYSENTER_32+0x1f/0x30
[  893.244105][T10318]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  893.251193][T10318] 
[  893.253697][T10318] Local variable opts created at:
[  893.262169][T10318]  __tcp_transmit_skb+0x4d/0x5fe0
[  893.267389][T10318]  __tcp_send_ack+0x967/0xad0
[  893.273301][T10318] 
[  893.275788][T10318] CPU: 0 UID: 0 PID: 10318 Comm: syz.1.910 Not tainted syzkaller #0 PREEMPT(lazy) 
[  893.285643][T10318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  893.296007][T10318] =====================================================
[  893.303237][T10318] Disabling lock debugging due to kernel taint
[  893.451592][T10318] Kernel panic - not syncing: kmsan.panic set ...
[  893.458201][T10318] CPU: 0 UID: 0 PID: 10318 Comm: syz.1.910 Tainted: G    B               syzkaller #0 PREEMPT(lazy) 
[  893.469240][T10318] Tainted: [B]=BAD_PAGE
[  893.473487][T10318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  893.483675][T10318] Call Trace:
[  893.487046][T10318]  <TASK>
[  893.490072][T10318]  __dump_stack+0x26/0x30
[  893.494568][T10318]  dump_stack_lvl+0x50/0x1c0
[  893.499326][T10318]  ? dump_stack+0x12/0x25
[  893.503829][T10318]  dump_stack+0x1e/0x25
[  893.508147][T10318]  vpanic+0x7b4/0x1430
[  893.512427][T10318]  panic+0x15d/0x160
[  893.516549][T10318]  kmsan_report+0x31a/0x320
[  893.521277][T10318]  ? __msan_warning+0x1b/0x30
[  893.526134][T10318]  ? mptcp_established_options+0x112f/0x3530
[  893.532345][T10318]  ? tcp_established_options+0x312/0xcc0
[  893.538137][T10318]  ? __tcp_transmit_skb+0x5dc/0x5fe0
[  893.543593][T10318]  ? __tcp_send_ack+0x967/0xad0
[  893.548596][T10318]  ? tcp_send_ack+0x3d/0x60
[  893.553279][T10318]  ? mptcp_subflow_shutdown+0x164/0x690
[  893.559046][T10318]  ? mptcp_check_send_data_fin+0x31b/0x3d0
[  893.565065][T10318]  ? __mptcp_close+0x860/0x1360
[  893.570105][T10318]  ? mptcp_close+0x42/0x260
[  893.574751][T10318]  ? inet_release+0x1ee/0x2a0
[  893.579622][T10318]  ? sock_close+0xd6/0x2f0
[  893.584183][T10318]  ? __fput+0x60e/0x1010
[  893.588611][T10318]  ? ____fput+0x25/0x30
[  893.592925][T10318]  ? task_work_run+0x208/0x2b0
[  893.597825][T10318]  ? exit_to_user_mode_loop+0x505/0x2420
[  893.603609][T10318]  ? __do_fast_syscall_32+0x2dc/0x470
[  893.609147][T10318]  ? do_fast_syscall_32+0x37/0x80
[  893.614321][T10318]  ? do_SYSENTER_32+0x1f/0x30
[  893.619171][T10318]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  893.625853][T10318]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  893.632544][T10318]  ? kmsan_get_metadata+0xf1/0x160
[  893.637851][T10318]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  893.643873][T10318]  ? mptcp_established_options+0xa1/0x3530
[  893.649893][T10318]  ? filter_irq_stacks+0x49/0x190
[  893.655069][T10318]  ? stack_depot_save_flags+0x35/0x790
[  893.660726][T10318]  ? kmsan_get_metadata+0xf1/0x160
[  893.666041][T10318]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  893.672563][T10318]  ? kmsan_get_metadata+0xf1/0x160
[  893.677878][T10318]  __msan_warning+0x1b/0x30
[  893.682551][T10318]  mptcp_established_options+0x112f/0x3530
[  893.688621][T10318]  tcp_established_options+0x312/0xcc0
[  893.694301][T10318]  __tcp_transmit_skb+0x5dc/0x5fe0
[  893.699608][T10318]  ? kmem_cache_alloc_node_noprof+0x3f5/0x12c0
[  893.705971][T10318]  ? kmsan_get_metadata+0xf1/0x160
[  893.711262][T10318]  ? kmsan_get_metadata+0xf1/0x160
[  893.716561][T10318]  ? kmsan_get_metadata+0xf1/0x160
[  893.721848][T10318]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  893.727863][T10318]  ? __alloc_skb+0xb7d/0x1190
[  893.732966][T10318]  __tcp_send_ack+0x967/0xad0
[  893.737837][T10318]  tcp_send_ack+0x3d/0x60
[  893.742351][T10318]  mptcp_subflow_shutdown+0x164/0x690
[  893.747925][T10318]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  893.753958][T10318]  mptcp_check_send_data_fin+0x31b/0x3d0
[  893.759813][T10318]  __mptcp_close+0x860/0x1360
[  893.764684][T10318]  ? __pfx_mptcp_close+0x10/0x10
[  893.769810][T10318]  mptcp_close+0x42/0x260
[  893.774285][T10318]  ? __pfx_mptcp_close+0x10/0x10
[  893.779401][T10318]  inet_release+0x1ee/0x2a0
[  893.784122][T10318]  ? __pfx_inet_release+0x10/0x10
[  893.789331][T10318]  sock_close+0xd6/0x2f0
[  893.793740][T10318]  ? __pfx_sock_close+0x10/0x10
[  893.798781][T10318]  __fput+0x60e/0x1010
[  893.803024][T10318]  ? __pfx_____fput+0x10/0x10
[  893.807851][T10318]  ____fput+0x25/0x30
[  893.811969][T10318]  task_work_run+0x208/0x2b0
[  893.816708][T10318]  exit_to_user_mode_loop+0x505/0x2420
[  893.822365][T10318]  ? __ia32_sys_close_range+0x96/0xe0
[  893.827958][T10318]  __do_fast_syscall_32+0x2dc/0x470
[  893.833327][T10318]  do_fast_syscall_32+0x37/0x80
[  893.838345][T10318]  do_SYSENTER_32+0x1f/0x30
[  893.843015][T10318]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  893.849556][T10318] RIP: 0023:0xf6fdf01c
[  893.853755][T10318] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  893.873531][T10318] RSP: 002b:00000000ffb4994c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4
[  893.882128][T10318] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e
[  893.890228][T10318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  893.898316][T10318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  893.906390][T10318] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  893.914550][T10318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  893.922673][T10318]  </TASK>
[  893.926426][T10318] Kernel Offset: disabled
[  893.930855][T10318] Rebooting in 86400 seconds..