last executing test programs:

18m38.959640551s ago: executing program 32 (id=2998):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000))
ioctl$PPPIOCSDEBUG(r0, 0x40047440, 0x0)

18m37.352711499s ago: executing program 33 (id=3019):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)
connect$llc(r0, &(0x7f0000000080)={0x1a, 0x322, 0x4c, 0x9, 0x5, 0xfb, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)

16m53.668559375s ago: executing program 34 (id=4046):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x1)

15m28.798142543s ago: executing program 35 (id=5053):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x9, 0x0, 'queue0\x00'})
write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0xd2, 0x0, 0x0, @time, {0x0, 0x1}, {0x0, 0x5}, @note={0x6, 0x29, 0x5, 0x0, 0xcde}}], 0x1c)

12m49.109264426s ago: executing program 36 (id=7218):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000380)=0x400, 0x4)

11m45.756243972s ago: executing program 37 (id=7719):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)

11m0.912196657s ago: executing program 38 (id=8211):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "78986f06"}]}}, 0x0}, 0x0)

10m51.201643016s ago: executing program 2 (id=8280):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x1, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xfdff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0xf, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x8000006, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0)
syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x100, 0x100002, 0x2b0}, 0x0, 0x0, 0x0)

10m50.98793842s ago: executing program 2 (id=8288):
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='.\x00\x00\x00>\x00', 0x6}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000069"], 0xfe33)

10m50.829869292s ago: executing program 2 (id=8282):
r0 = msgget$private(0x0, 0x40)
msgsnd(r0, &(0x7f0000000380)={0x2}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000480)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f00000003c0)={0x0, ""/183}, 0xbf, 0x2, 0x3000)

10m47.337949253s ago: executing program 2 (id=8286):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)

10m47.037737144s ago: executing program 2 (id=8291):
r0 = socket$kcm(0x2, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', <r2=>0x0})
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0)

10m45.782084984s ago: executing program 2 (id=8299):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010)
io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0}])
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}})

10m45.141743988s ago: executing program 39 (id=8299):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010)
io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0}])
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}})

7m26.836255393s ago: executing program 8 (id=10320):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="200f4900"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7m25.175491841s ago: executing program 8 (id=10338):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000780)={0x1, 0x0, [{0x48a}]})

7m24.974432054s ago: executing program 8 (id=10339):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x8, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x803, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x3, 0x1, 0x8, 0x6, 0x9, 0x7, 0x9, 0x4, 0x5, 0x1, 0x5, 0x4, 0x3, 0x4, 0xa, 0x8, 0x3, 0x8, 0xffffff80, 0x2, 0xffff, 0x6, 0x939, 0x5, 0x9, 0x2, 0x4f, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x3, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x22], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x1, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x8, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xa9, 0x101, 0x10, 0x2, 0x7, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x6, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24b, 0x1ff, 0x2a0, 0x5, 0x6, 0x8, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x4, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x9, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c13, 0x1, 0x1, 0x7, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x3, 0x9, 0xdd, 0xfe83, 0x9, 0xc3, 0x7751c64, 0x800007a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x3, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x9, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xffffff81, 0x5, 0x10005, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0x4000b329, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000bd8000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)

7m24.85055453s ago: executing program 8 (id=10340):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00')

7m24.79588849s ago: executing program 8 (id=10341):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}]}})

7m23.867708145s ago: executing program 8 (id=10349):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="000c150c00"], 0x0, 0x0})

7m23.503110822s ago: executing program 40 (id=10349):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="000c150c00"], 0x0, 0x0})

3m9.337295432s ago: executing program 1 (id=13244):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000feffffff0f00000008000300", @ANYRES32=r2, @ANYBLOB="050035000400000008002cfe0600000005002d0001210000080034"], 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x18)

3m9.271006879s ago: executing program 1 (id=13245):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r1=>0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10)
shutdown(r0, 0x2)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000800)={r1, @in={{0x2, 0x4e22, @empty}}, 0x9, 0x10}, 0x90)

3m8.99476868s ago: executing program 1 (id=13249):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x48082}, 0x48010)

3m8.773149891s ago: executing program 1 (id=13252):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
umount2(&(0x7f0000000380)='./file0\x00', 0x0)

3m8.70743303s ago: executing program 1 (id=13254):
socket$packet(0x11, 0x2, 0x300)
socket$kcm(0x2, 0xa, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
read$watch_queue(r0, &(0x7f00000002c0)=""/193, 0xc1)

3m7.950399824s ago: executing program 1 (id=13261):
r0 = socket(0x2, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x10)
setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000000), 0x4)
sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000440)="54d9b7a0f1000000f633f4ce15962d9b1d000000", 0x14}], 0x1}}], 0x1, 0x4)

3m7.79947173s ago: executing program 41 (id=13261):
r0 = socket(0x2, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x10)
setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000000), 0x4)
sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000440)="54d9b7a0f1000000f633f4ce15962d9b1d000000", 0x14}], 0x1}}], 0x1, 0x4)

3m4.970858741s ago: executing program 4 (id=13288):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea6f464160af36514001a240800020004000200060006000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

3m4.775062002s ago: executing program 4 (id=13291):
syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0xa7, 0x0, 0x2, [{0x0, 0x0}, {0x4d, &(0x7f0000000480)=@string={0x4d, 0x3, "3853289df95c3a586acbcb56add7e4726c104ffc587c9de3800d5be0915b0bd859f7ec3d8b7b404614bb7aac303a239fb287067c44059af458b8915c17c88fc8b1813db9cab63b6831719b"}}]})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)

3m4.110381334s ago: executing program 4 (id=13293):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
recvmsg(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001500)=""/56, 0x38}, {&(0x7f0000001540)=""/46, 0x2e}, {&(0x7f0000001580)=""/189, 0xbd}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/62, 0x3e}, {&(0x7f0000002680)=""/135, 0x87}, {&(0x7f0000002740)=""/74, 0x4a}, {&(0x7f00000027c0)=""/124, 0x7c}, {&(0x7f0000002840)=""/87, 0x57}], 0x9}, 0x10140)

3m4.041667208s ago: executing program 4 (id=13294):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
umount2(&(0x7f0000000380)='./file0\x00', 0x4)

3m3.890576889s ago: executing program 4 (id=13295):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7980, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x10001, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xf14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x9})

3m2.741849036s ago: executing program 4 (id=13303):
r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0xa, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@userptr={0x2, 0x1, 0x4, 0x0, 0x8, {}, {0x0, 0x8, 0x3, 0x7f, 0xff, 0xa3, "2599b83b"}, 0x5, 0x2, {0x0}, 0x9, 0x0, r1})

3m2.479272264s ago: executing program 42 (id=13303):
r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0xa, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000, 0x0, <r1=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@userptr={0x2, 0x1, 0x4, 0x0, 0x8, {}, {0x0, 0x8, 0x3, 0x7f, 0xff, 0xa3, "2599b83b"}, 0x5, 0x2, {0x0}, 0x9, 0x0, r1})

2m39.476151168s ago: executing program 7 (id=13418):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/77, 0x4d}, {&(0x7f0000001880)=""/4112, 0x1010}, {&(0x7f0000001680)=""/100, 0x64}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000005c0)=""/48, 0x30}], 0x5}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8000d2a7}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xef23fe83}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xd9f}], 0x9, 0x2030, 0x0)

2m39.226249393s ago: executing program 7 (id=13419):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60)

2m38.958794501s ago: executing program 7 (id=13421):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000, 0xaa5})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r1, 0x0, &(0x7f000009f000/0x2000)=nil, 0x2000, 0x2})

2m38.76538429s ago: executing program 7 (id=13424):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0)

2m38.577976979s ago: executing program 7 (id=13427):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0)

2m38.479927629s ago: executing program 7 (id=13428):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x1c4}]})

2m27.820589261s ago: executing program 3 (id=13524):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m25.889538794s ago: executing program 3 (id=13531):
r0 = socket(0x28, 0x805, 0x0)
bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r0, 0x7)
accept4$unix(r0, 0x0, 0x0, 0x0)

2m25.635292116s ago: executing program 3 (id=13534):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800)

2m25.370452426s ago: executing program 3 (id=13537):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)

2m25.131672109s ago: executing program 3 (id=13538):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0)

2m25.00108067s ago: executing program 3 (id=13539):
ioprio_set$uid(0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sync()

2m22.565820874s ago: executing program 43 (id=13428):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x1c4}]})

2m9.842265107s ago: executing program 44 (id=13539):
ioprio_set$uid(0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sync()

23.670068721s ago: executing program 0 (id=14424):
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x88)
r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000400)=0x1000, 0x12)

23.538666292s ago: executing program 0 (id=14426):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0)

21.356561383s ago: executing program 0 (id=14444):
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x232}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067", 0x23}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e3b81aaba048fa4264d4c", 0xc4}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

21.203229729s ago: executing program 0 (id=14447):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0)

20.994509757s ago: executing program 0 (id=14450):
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
splice(r1, 0x0, r0, 0x0, 0x200, 0x0)
vmsplice(r2, &(0x7f0000000100)=[{&(0x7f00000003c0)="89a25031b0f94f0cd90348a0d21ee413fa36ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9c90c9dcac5cf843794592a5d408bd312d70e145a62181e3aaa9c243d775a318fc99b7", 0x72}, {&(0x7f0000002c40)="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", 0x18f}], 0x2, 0xa)

18.314424505s ago: executing program 0 (id=14466):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"})
r1 = syz_open_pts(r0, 0xa0200)
dup3(r1, r0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

18.020855214s ago: executing program 45 (id=14466):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"})
r1 = syz_open_pts(r0, 0xa0200)
dup3(r1, r0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

5.904571011s ago: executing program 6 (id=14517):
r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x8, {0x8, 0x11, "e4ff14eca81f"}}, 0x0}, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

3.237887383s ago: executing program 9 (id=14524):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"})
socket$alg(0x26, 0x5, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"})

2.771490229s ago: executing program 5 (id=14525):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x60, r2, 0x1, 0x1, 0x25dfdc01, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40810)

2.425671014s ago: executing program 6 (id=14526):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x2d, 0x20040040)
close_range(r0, 0xffffffffffffffff, 0x0)

2.097513474s ago: executing program 6 (id=14527):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x5, 0x100, 0x7f})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

2.004480702s ago: executing program 9 (id=14528):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x1})

1.919310426s ago: executing program 5 (id=14529):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r2}, 0x10)

1.847576722s ago: executing program 9 (id=14530):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x104, 0x0, 0x2080, {0x0, 0x4000, {}, 0x1, 0xffffffffffffffff}})

1.602065733s ago: executing program 6 (id=14531):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x1)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)=0x1})

1.539501514s ago: executing program 9 (id=14532):
openat$sndseq(0xffffff9c, &(0x7f0000000100), 0x0)
syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x5, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x9, 0x4d, 0x7fff, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x9, 0x9, 0x1, 0xfffff801, 0x8, 0xe261, 0x7fff, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0xc, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0x4b, 0x6, 0x5, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0x3, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2b, 0x5a04, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x3, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x3, 0x5, 0x1007, 0x0, 0xa40, 0xfffffffd, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x3, 0xc0, 0x10002, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0xe, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x100001ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0xb, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x5, 0xb1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1.521919085s ago: executing program 5 (id=14533):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004)
accept4(r1, 0x0, 0x0, 0x0)

1.128092678s ago: executing program 5 (id=14534):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x30, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x480, 0x0, 0x80000001}]})

847.939744ms ago: executing program 6 (id=14535):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setreuid(0x0, r2)
fcntl$setstatus(r0, 0x4, 0x460c0)

718.729174ms ago: executing program 9 (id=14536):
unshare(0x8000000)
r0 = semget$private(0x0, 0x1, 0x3)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x7])
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x43, 0x1000}], 0x1, 0x0)
unshare(0x8000000)

484.919843ms ago: executing program 5 (id=14537):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000700)={0x0, 0x0, r2, r3, 0x2, 0x40, 0x8, 0x9a, {0x9, 0xb13, 0xef51, 0x5, 0x1, 0x1, 0x8, 0xaf02, 0x0, 0x5, 0x0, 0xfffffff9, 0x93, 0x8, "41ed6dd4a8b629c657994fc7ef37c9eaff6666490f62b8c119571d4132b2629a"}})

417.882224ms ago: executing program 9 (id=14538):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x458, 0x153, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x3, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0xe, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
creat(0x0, 0x110)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB=' \"7'], 0x0, 0x0, 0x0, 0x0}, 0x0)

200.425409ms ago: executing program 6 (id=14539):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x80, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x20000014)

0s ago: executing program 5 (id=14540):
r0 = socket(0x11, 0xa, 0x5)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x100, 0x4)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendto$inet(r0, &(0x7f0000000000)="cf3a19d02404e49cf90a0a4363d1", 0xe, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10)

kernel console output (not intermixed with test programs):

g 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1215.590662][T17970] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1215.590693][T17970] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1215.591939][T17970] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1215.591966][T17970] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[ 1215.592003][T17970] usb 2-1: Product: syz
[ 1215.598071][T17970] usb 2-1: config 0 descriptor??
[ 1215.607901][ T2446] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1215.714027][   T10] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO)
[ 1215.945626][   T10] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71
[ 1215.961460][   T10] usb 5-1: USB disconnect, device number 39
[ 1215.975117][ T5810] udevd[5810]: setting mode of /dev/bus/usb/005/039 to 020664 failed: No such file or directory
[ 1215.975378][ T5810] udevd[5810]: setting owner of /dev/bus/usb/005/039 to uid=0, gid=0 failed: No such file or directory
[ 1216.063581][T17970] usb 2-1: USB disconnect, device number 97
[ 1218.268670][   T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 1218.364328][ T2541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12506'.
[ 1218.364641][ T2541] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12506'.
[ 1218.475075][   T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1218.475110][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1218.506821][   T10] usb 5-1: config 0 descriptor??
[ 1218.534935][   T10] cp210x 5-1:0.0: cp210x converter detected
[ 1219.149066][ T2566] program syz.6.12513 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1219.198652][   T10] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1219.198710][   T10] cp210x 5-1:0.0: GPIO initialisation failed: -71
[ 1219.214733][   T10] usb 5-1: cp210x converter now attached to ttyUSB0
[ 1219.258600][   T10] usb 5-1: USB disconnect, device number 40
[ 1219.281781][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1219.287552][   T10] cp210x 5-1:0.0: device disconnected
[ 1219.707975][T27383] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1220.523588][ T2622] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1221.018047][ T2641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12541'.
[ 1221.018068][ T2641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12541'.
[ 1221.147427][ T2645] program syz.4.12542 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1221.256684][ T2652] netlink: 26332 bytes leftover after parsing attributes in process `syz.4.12544'.
[ 1222.528506][ T5826] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[ 1222.678438][ T5826] usb 2-1: Using ep0 maxpacket: 32
[ 1222.682699][ T5826] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1222.682730][ T5826] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 1222.682757][ T5826] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1222.688535][ T5826] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1222.688562][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1222.688583][ T5826] usb 2-1: Product: syz
[ 1222.688597][ T5826] usb 2-1: Manufacturer: syz
[ 1222.688612][ T5826] usb 2-1: SerialNumber: syz
[ 1222.809575][ T5826] usb 2-1: config 0 descriptor??
[ 1223.241054][ T5826] gs_usb 2-1:0.0: Configuring for 234 interfaces
[ 1223.490428][ T2726] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1223.653130][ T5826] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO)
[ 1223.709853][ T5906] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 1223.819431][ T5826] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71
[ 1223.856497][ T5826] usb 2-1: USB disconnect, device number 98
[ 1223.870279][ T5906] usb 5-1: Using ep0 maxpacket: 32
[ 1223.874979][ T5906] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1223.875016][ T5906] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 1223.875043][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1223.900020][ T5906] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1223.900048][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1223.900069][ T5906] usb 5-1: Product: syz
[ 1223.900084][ T5906] usb 5-1: Manufacturer: syz
[ 1223.900100][ T5906] usb 5-1: SerialNumber: syz
[ 1223.962098][ T5906] usb 5-1: config 0 descriptor??
[ 1224.118673][ T2750] netlink: 100 bytes leftover after parsing attributes in process `syz.0.12584'.
[ 1224.293136][ T2757] netlink: 26332 bytes leftover after parsing attributes in process `syz.0.12585'.
[ 1224.392370][ T5906] gs_usb 5-1:0.0: Configuring for 256 interfaces
[ 1224.392397][ T5906] gs_usb 5-1:0.0: Driver cannot handle more that 255 CAN interfaces
[ 1224.392439][ T5906] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22
[ 1224.614486][ T5826] usb 5-1: USB disconnect, device number 41
[ 1225.576432][   T37] audit: type=1326 audit(2000112058.384:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2808 comm="syz.6.12607" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f7827c819 code=0x0
[ 1225.949686][ T5826] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 1225.977603][ T2828] bridge0: port 3(veth1_macvtap) entered blocking state
[ 1225.977829][ T2828] bridge0: port 3(veth1_macvtap) entered disabled state
[ 1225.978107][ T2828] veth1_macvtap: entered allmulticast mode
[ 1226.021097][ T2828] veth1_macvtap: left allmulticast mode
[ 1226.098365][ T5826] usb 5-1: Using ep0 maxpacket: 8
[ 1226.106247][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1226.106281][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1226.106321][ T5826] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[ 1226.106346][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1226.165501][ T5826] usb 5-1: config 0 descriptor??
[ 1226.256571][ T2833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12615'.
[ 1226.597490][ T5826] cherry 0003:046A:0027.00B1: fixing up Cherry Cymotion report descriptor
[ 1226.598089][ T5826] cherry 0003:046A:0027.00B1: unknown main item tag 0x2
[ 1226.598123][ T5826] cherry 0003:046A:0027.00B1: unknown main item tag 0x0
[ 1226.598162][ T5826] cherry 0003:046A:0027.00B1: unknown main item tag 0x0
[ 1226.599691][ T5826] cherry 0003:046A:0027.00B1: unknown main item tag 0x0
[ 1226.599728][ T5826] cherry 0003:046A:0027.00B1: unknown main item tag 0x0
[ 1226.599815][ T5826] cherry 0003:046A:0027.00B1: unknown main item tag 0x0
[ 1226.599885][ T5826] cherry 0003:046A:0027.00B1: unknown main item tag 0x0
[ 1226.599963][ T5826] cherry 0003:046A:0027.00B1: unknown main item tag 0x0
[ 1226.600047][ T5826] cherry 0003:046A:0027.00B1: unknown main item tag 0x0
[ 1226.600124][ T5826] cherry 0003:046A:0027.00B1: unknown main item tag 0x0
[ 1226.712515][ T5826] cherry 0003:046A:0027.00B1: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.4-1/input0
[ 1226.791664][ T5826] usb 5-1: USB disconnect, device number 42
[ 1226.966177][ T2851] fido_id[2851]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 1227.402514][ T2880] netlink: 88 bytes leftover after parsing attributes in process `syz.4.12628'.
[ 1229.320361][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1229.320757][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1229.563084][ T3001] tipc: New replicast peer: 255.255.255.255
[ 1229.564003][ T3001] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1230.013946][ T3019] input: syz1 as /devices/virtual/input/input87
[ 1230.158353][ T5906] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 1230.308397][ T5906] usb 5-1: Using ep0 maxpacket: 32
[ 1230.324818][ T5906] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[ 1230.324842][ T5906] usb 5-1: config 0 has no interface number 0
[ 1230.340217][ T5906] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1230.340250][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1230.340273][ T5906] usb 5-1: Product: syz
[ 1230.340289][ T5906] usb 5-1: Manufacturer: syz
[ 1230.340305][ T5906] usb 5-1: SerialNumber: syz
[ 1230.391472][ T5906] usb 5-1: config 0 descriptor??
[ 1230.404909][ T5906] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1230.615829][ T3017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1230.616502][ T3017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1230.656250][ T5906] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1230.684287][ T5906] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1230.834251][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short
[ 1230.961736][   T37] audit: type=1326 audit(2000112063.774:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3038 comm="syz.1.12695" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d1c7cc819 code=0x0
[ 1231.035281][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1231.040125][ T5826] usb 5-1: USB disconnect, device number 43
[ 1231.081339][ T5826] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1231.120470][ T5826] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1231.126366][ T5826] quatech2 5-1:0.51: device disconnected
[ 1231.757285][ T3066] sctp: [Deprecated]: syz.0.12705 (pid 3066) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1231.757285][ T3066] Use struct sctp_sack_info instead
[ 1231.958469][ T5826] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 1232.116569][ T5826] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1232.116604][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1232.150182][ T5826] usb 5-1: config 0 descriptor??
[ 1233.021957][ T5826] usb 5-1: Cannot set autoneg
[ 1233.022246][ T5826] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1233.054173][ T5826] usb 5-1: USB disconnect, device number 44
[ 1233.066673][ T3112] tipc: New replicast peer: 255.255.255.255
[ 1233.123424][ T3112] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1233.951390][ T3150] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1234.178455][ T7517] tipc: Node number set to 2886997007
[ 1234.248479][ T5869] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[ 1234.398428][ T5826] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[ 1234.416990][ T5869] usb 2-1: Using ep0 maxpacket: 16
[ 1234.426365][ T5869] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1234.426400][ T5869] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1234.426437][ T5869] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1234.426463][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1234.482093][ T5869] usb 2-1: config 0 descriptor??
[ 1234.562473][ T5826] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1234.562532][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1234.562564][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1234.562587][ T5826] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1234.563913][ T5826] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1234.563942][ T5826] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1234.563963][ T5826] usb 5-1: Manufacturer: syz
[ 1234.575073][ T5826] usb 5-1: config 0 descriptor??
[ 1234.898379][ T5826] rc_core: IR keymap rc-hauppauge not found
[ 1234.898406][ T5826] Registered IR keymap rc-empty
[ 1234.898564][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1234.907753][ T5869] hid_parser_main: 40 callbacks suppressed
[ 1234.907778][ T5869] mcp2221 0003:04D8:00DD.00B2: unknown main item tag 0x0
[ 1234.907809][ T5869] mcp2221 0003:04D8:00DD.00B2: unknown main item tag 0x0
[ 1234.907838][ T5869] mcp2221 0003:04D8:00DD.00B2: unknown main item tag 0x0
[ 1234.907867][ T5869] mcp2221 0003:04D8:00DD.00B2: unknown main item tag 0x0
[ 1234.907894][ T5869] mcp2221 0003:04D8:00DD.00B2: unknown main item tag 0x0
[ 1234.920820][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1234.977698][ T5869] mcp2221 0003:04D8:00DD.00B2: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[ 1234.982214][ T5826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1235.045886][ T5826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input88
[ 1235.057740][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1235.092434][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1235.115082][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1235.115371][    C1] usb 2-1: input irq status -75 received
[ 1235.133874][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1235.148557][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1235.168548][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1235.188493][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1235.208699][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1235.233202][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1235.234462][ T3182] sctp: [Deprecated]: syz.6.12757 (pid 3182) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1235.234462][ T3182] Use struct sctp_sack_info instead
[ 1235.248763][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1235.324286][ T1250] usb 2-1: USB disconnect, device number 99
[ 1235.363492][ T5826] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1235.363520][ T5826] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1235.413660][ T5826] usb 5-1: USB disconnect, device number 45
[ 1235.796491][ T3196] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12764'.
[ 1236.341346][ T3217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12774'.
[ 1236.613905][ T3230] kvm: kvm [3229]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0xb
[ 1237.105482][ T3248] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode
[ 1237.106241][ T3248] mac80211_hwsim hwsim32 wlan0: left allmulticast mode
[ 1237.239934][ T1250] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 1237.388334][ T1250] usb 2-1: Using ep0 maxpacket: 16
[ 1237.390577][ T1250] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1237.407212][ T1250] usb 2-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40
[ 1237.407248][ T1250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1237.407264][ T1250] usb 2-1: Product: syz
[ 1237.407275][ T1250] usb 2-1: Manufacturer: syz
[ 1237.407287][ T1250] usb 2-1: SerialNumber: syz
[ 1237.703532][ T1250] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1237.705282][ T1250] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1237.708021][ T1250] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[ 1237.708075][ T1250] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[ 1237.916886][ T1250] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1237.955845][ T1250] usb 2-1: USB disconnect, device number 100
[ 1238.017468][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1238.854957][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.950809][ T3276] input: syz1 as /devices/virtual/input/input89
[ 1239.063212][ T3278] netlink: 56 bytes leftover after parsing attributes in process `syz.6.12801'.
[ 1239.821708][ T3309] kvm: kvm [3308]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0xb
[ 1240.296853][ T3330] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12826'.
[ 1240.544899][ T3345] netlink: 72 bytes leftover after parsing attributes in process `syz.4.12834'.
[ 1240.544922][ T3345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12834'.
[ 1240.691279][ T3352] input: syz1 as /devices/virtual/input/input90
[ 1241.649788][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1242.020477][ T3395] syz.4.12858 (3395) used greatest stack depth: 16952 bytes left
[ 1242.582288][ T3420] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12869'.
[ 1242.767883][ T3426] tipc: Enabled bearer <udp:syz1>, priority 10
[ 1242.778457][ T7517] usb 2-1: new full-speed USB device number 101 using dummy_hcd
[ 1242.805925][ T3428] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12873'.
[ 1242.886678][ T3433] netlink: 'syz.4.12874': attribute type 83 has an invalid length.
[ 1242.934501][ T7517] usb 2-1: config 0 has an invalid interface number: 133 but max is 0
[ 1242.934535][ T7517] usb 2-1: config 0 has no interface number 0
[ 1242.937125][ T7517] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[ 1242.937147][ T7517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1242.937162][ T7517] usb 2-1: Product: syz
[ 1242.937173][ T7517] usb 2-1: Manufacturer: syz
[ 1242.937185][ T7517] usb 2-1: SerialNumber: syz
[ 1242.983110][ T7517] usb 2-1: config 0 descriptor??
[ 1243.205650][ T7517] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected
[ 1243.219642][ T7517] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81
[ 1243.219731][ T7517] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1
[ 1243.220042][ T7517] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2
[ 1243.224356][ T7517] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1243.608873][ T5906] usb 2-1: USB disconnect, device number 101
[ 1243.636796][ T5906] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1243.637749][ T5906] keyspan 2-1:0.133: device disconnected
[ 1243.806415][ T3453] team0: No ports can be present during mode change
[ 1244.118465][ T5826] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 1244.268423][ T5826] usb 5-1: Using ep0 maxpacket: 16
[ 1244.272595][ T5826] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1244.272627][ T5826] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1244.272651][ T5826] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1244.272667][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1244.295254][ T5826] usb 5-1: config 0 descriptor??
[ 1244.648699][ T1250] usb 2-1: new full-speed USB device number 102 using dummy_hcd
[ 1244.749287][ T5826] mcp2221 0003:04D8:00DD.00B3: unknown main item tag 0x0
[ 1244.750428][ T5826] mcp2221 0003:04D8:00DD.00B3: unknown main item tag 0x0
[ 1244.750468][ T5826] mcp2221 0003:04D8:00DD.00B3: unknown main item tag 0x0
[ 1244.750495][ T5826] mcp2221 0003:04D8:00DD.00B3: unknown main item tag 0x0
[ 1244.750520][ T5826] mcp2221 0003:04D8:00DD.00B3: unknown main item tag 0x0
[ 1244.751352][ T5826] mcp2221 0003:04D8:00DD.00B3: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[ 1244.827367][ T1250] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1244.827423][ T1250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1244.827496][ T1250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1244.827514][ T1250] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1244.852686][ T1250] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1244.852896][ T1250] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1244.852955][ T1250] usb 2-1: Manufacturer: syz
[ 1244.913919][ T1250] usb 2-1: config 0 descriptor??
[ 1244.942949][    C0] usb 5-1: input irq status -75 received
[ 1245.164581][ T5906] usb 5-1: USB disconnect, device number 46
[ 1245.248816][ T1250] rc_core: IR keymap rc-hauppauge not found
[ 1245.248838][ T1250] Registered IR keymap rc-empty
[ 1245.248994][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1245.268766][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1245.304292][ T1250] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1245.307521][ T1250] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input93
[ 1245.343557][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1245.358669][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1245.380559][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1245.398435][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1245.418782][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1245.438500][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1245.458435][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1245.478387][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1245.498426][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1245.518420][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1245.541761][ T1250] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1245.541786][ T1250] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1245.643083][   T32] usb 2-1: USB disconnect, device number 102
[ 1245.704722][ T3491] netlink: 72 bytes leftover after parsing attributes in process `syz.6.12896'.
[ 1245.704753][ T3491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12896'.
[ 1246.257209][ T3514] netlink: 64 bytes leftover after parsing attributes in process `syz.6.12905'.
[ 1246.364934][ T3519] kvm: kvm [3518]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3
[ 1246.527771][ T3525] binder: 3524:3525 ioctl c018620c 200000000580 returned -22
[ 1247.097022][ T3557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12926'.
[ 1247.215215][ T3561] netlink: 164 bytes leftover after parsing attributes in process `syz.4.12928'.
[ 1247.235903][ T3560] tipc: Enabled bearer <udp:syz1>, priority 10
[ 1247.601495][ T3581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12938'.
[ 1248.424333][ T3613] netlink: 164 bytes leftover after parsing attributes in process `syz.0.12954'.
[ 1249.032177][ T3637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12964'.
[ 1249.382498][ T3651] binder: 3650:3651 ioctl c018620c 200000000580 returned -22
[ 1249.611378][ T3662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12976'.
[ 1250.183323][ T3680] kvm: kvm [3678]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x200000000
[ 1250.360639][ T3686] kvm: kvm [3685]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3
[ 1250.441410][ T3690] netlink: 'syz.6.12989': attribute type 4 has an invalid length.
[ 1250.441435][ T3690] netlink: 17 bytes leftover after parsing attributes in process `syz.6.12989'.
[ 1250.442875][ T3690] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.12989'.
[ 1250.625862][ T3547] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1251.197362][ T3717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13003'.
[ 1251.354104][ T3725] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.13008'.
[ 1251.669773][ T3735] overlayfs: failed lookup in lower (newroot/2073, name='file0', err=-40): overlapping layers
[ 1252.450834][ T3767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13026'.
[ 1252.707257][ T3775] netlink: 'syz.1.13029': attribute type 4 has an invalid length.
[ 1252.707280][ T3775] netlink: 17 bytes leftover after parsing attributes in process `syz.1.13029'.
[ 1252.727444][ T3775] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.13029'.
[ 1252.863320][ T3779] kvm: kvm [3778]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x200000000
[ 1253.773811][ T3795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13039'.
[ 1253.939265][ T3803] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1254.888000][ T3835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13059'.
[ 1255.109186][ T3841] netlink: 1 bytes leftover after parsing attributes in process `syz.0.13060'.
[ 1255.838399][ T3878] netlink: 'syz.4.13074': attribute type 10 has an invalid length.
[ 1255.894859][ T3878] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1255.992793][ T3878] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1256.149846][ T3892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13085'.
[ 1256.217610][ T3896] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1256.538741][ T7517] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 1256.711539][ T7517] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1256.711564][ T7517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1256.740124][ T7517] usb 2-1: config 0 descriptor??
[ 1256.747986][ T7517] cp210x 2-1:0.0: cp210x converter detected
[ 1256.818411][ T1250] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 1256.968740][ T1250] usb 5-1: Using ep0 maxpacket: 8
[ 1256.971520][ T1250] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[ 1256.971545][ T1250] usb 5-1: config 0 has no interface number 0
[ 1256.971591][ T1250] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1256.971830][ T1250] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1256.971857][ T1250] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1256.971884][ T1250] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1256.971926][ T1250] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1256.972343][ T1250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1257.077808][ T1250] usb 5-1: config 0 descriptor??
[ 1257.127252][ T1250] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1257.148638][ T7517] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1257.194147][ T7517] usb 2-1: cp210x converter now attached to ttyUSB0
[ 1257.355380][ T5906] usb 2-1: USB disconnect, device number 103
[ 1257.372797][ T5869] usb 5-1: USB disconnect, device number 47
[ 1257.372908][    C0] ldusb 5-1:0.55: usb_submit_urb failed (-19)
[ 1257.447368][ T5906] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1257.472358][ T5869] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[ 1257.592426][ T5906] cp210x 2-1:0.0: device disconnected
[ 1258.329835][ T3946] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1258.330161][ T3946] syzkaller1: linktype set to 786
[ 1259.165648][ T3991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13121'.
[ 1259.326432][ T3997] netlink: 'syz.1.13124': attribute type 83 has an invalid length.
[ 1259.658504][ T4004] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1259.658821][ T4004] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1259.789729][ T4018] vxcan0: tx address claim with dlc 0
[ 1259.866448][ T5824] Bluetooth: hci3: connection err: -111
[ 1260.087350][ T4029] netlink: 'syz.6.13135': attribute type 10 has an invalid length.
[ 1260.187334][ T4031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13139'.
[ 1260.228025][ T4029] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1260.240174][ T4029] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1260.677389][ T4053] overlayfs: conflicting options: nfs_export=on,metacopy=on
[ 1261.338597][   T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 1261.495291][   T10] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[ 1261.495328][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1261.495344][   T10] usb 5-1: Product: syz
[ 1261.495355][   T10] usb 5-1: Manufacturer: syz
[ 1261.495366][   T10] usb 5-1: SerialNumber: syz
[ 1261.534560][   T10] usb 5-1: config 0 descriptor??
[ 1261.618371][ T1250] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 1261.728877][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1261.728921][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1261.750685][   T10] usb 5-1: ignoring: probably an ADSL modem
[ 1261.768389][ T1250] usb 2-1: Using ep0 maxpacket: 16
[ 1261.770509][ T1250] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1261.770546][ T1250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1261.770568][ T1250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1261.770628][ T1250] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1261.770646][ T1250] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1261.772008][ T1250] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1261.772034][ T1250] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1261.772050][ T1250] usb 2-1: Manufacturer: syz
[ 1261.813415][ T1250] usb 2-1: config 0 descriptor??
[ 1262.153604][   T10] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 1262.210587][ T1250] rc_core: IR keymap rc-hauppauge not found
[ 1262.210609][ T1250] Registered IR keymap rc-empty
[ 1262.210759][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1262.236701][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1262.249966][ T1250] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1262.253105][ T1250] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input94
[ 1262.257098][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1262.299556][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1262.318477][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1262.338695][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1262.358706][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1262.378494][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1262.398467][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1262.400028][T17970] usb 5-1: USB disconnect, device number 48
[ 1262.418426][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1262.438679][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1262.458435][ T1250] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1262.483301][ T1250] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1262.483327][ T1250] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1262.613318][ T1250] usb 2-1: USB disconnect, device number 104
[ 1263.269988][ T4092] netlink: 'syz.4.13165': attribute type 83 has an invalid length.
[ 1263.620498][T17970] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 1263.672782][ T4104] overlayfs: conflicting options: nfs_export=on,metacopy=on
[ 1263.770343][T17970] usb 2-1: Using ep0 maxpacket: 16
[ 1263.775862][T17970] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1263.803165][T17970] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05
[ 1263.803198][T17970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1263.803223][T17970] usb 2-1: Product: syz
[ 1263.803240][T17970] usb 2-1: Manufacturer: syz
[ 1263.803256][T17970] usb 2-1: SerialNumber: syz
[ 1264.084082][T17970] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[ 1264.685903][T17970] gspca_vc032x: reg_r err -71
[ 1264.685943][T17970] gspca_vc032x: I2c Bus Busy Wait 00
[ 1264.685956][T17970] gspca_vc032x: I2c Bus Busy Wait 00
[ 1264.685966][T17970] gspca_vc032x: I2c Bus Busy Wait 00
[ 1264.685977][T17970] gspca_vc032x: I2c Bus Busy Wait 00
[ 1264.685988][T17970] gspca_vc032x: I2c Bus Busy Wait 00
[ 1264.685998][T17970] gspca_vc032x: I2c Bus Busy Wait 00
[ 1264.686008][T17970] gspca_vc032x: I2c Bus Busy Wait 00
[ 1264.686019][T17970] gspca_vc032x: I2c Bus Busy Wait 00
[ 1264.686029][T17970] gspca_vc032x: I2c Bus Busy Wait 00
[ 1264.686045][T17970] gspca_vc032x: I2c Bus Busy Wait 00
[ 1264.686056][T17970] gspca_vc032x: I2c Bus Busy Wait 00
[ 1264.686067][T17970] gspca_vc032x: I2c Bus Busy Wait 00
[ 1264.686077][T17970] gspca_vc032x: I2c Bus Busy Wait 00
[ 1264.686087][T17970] gspca_vc032x: I2c Bus Busy Wait 00
[ 1264.686098][T17970] gspca_vc032x: I2c Bus Busy Wait 00
[ 1264.686109][T17970] gspca_vc032x: I2c Bus Busy Wait 00
[ 1264.686120][T17970] gspca_vc032x: I2c Bus Busy Wait 00
[ 1264.686131][T17970] gspca_vc032x: I2c Bus Busy Wait 00
[ 1264.686142][T17970] gspca_vc032x: I2c Bus Busy Wait 00
[ 1264.686152][T17970] gspca_vc032x: Unknown sensor...
[ 1264.686238][T17970] vc032x 2-1:12.0: probe with driver vc032x failed with error -22
[ 1264.804596][ T4131] ªªªªªª: renamed from vlan0 (while UP)
[ 1264.828104][T17970] usb 2-1: USB disconnect, device number 105
[ 1265.776586][ T4166] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543
[ 1266.103597][ T4176] input: syz0 as /devices/virtual/input/input95
[ 1266.439020][ T4184] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1266.439343][ T4184] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1266.445680][ T5824] Bluetooth: hci1: connection err: -111
[ 1266.849611][T17970] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 1267.003558][T17970] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[ 1267.003595][T17970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1267.003611][T17970] usb 2-1: Product: syz
[ 1267.003642][T17970] usb 2-1: Manufacturer: syz
[ 1267.003653][T17970] usb 2-1: SerialNumber: syz
[ 1267.007882][T17970] usb 2-1: config 0 descriptor??
[ 1267.239555][T17970] usb 2-1: ignoring: probably an ADSL modem
[ 1267.644156][T17970] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 1267.857485][ T1250] usb 2-1: USB disconnect, device number 106
[ 1268.064323][ T4220] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13223'.
[ 1268.238781][ T5826] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1268.388606][ T5826] usb 5-1: Using ep0 maxpacket: 16
[ 1268.391223][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1268.391260][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1268.391303][ T5826] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1268.391329][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1268.413326][ T5826] usb 5-1: config 0 descriptor??
[ 1268.448843][T17789] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1268.448907][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1268.873340][ T5826] mcp2221 0003:04D8:00DD.00B4: collection stack underflow
[ 1268.873375][ T5826] mcp2221 0003:04D8:00DD.00B4: item 0 4 0 12 parsing failed
[ 1268.874152][ T5826] mcp2221 0003:04D8:00DD.00B4: can't parse reports
[ 1268.874260][ T5826] mcp2221 0003:04D8:00DD.00B4: probe with driver mcp2221 failed with error -22
[ 1269.076087][ T5826] usb 5-1: USB disconnect, device number 49
[ 1270.558563][T17970] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 1270.688606][ T5824] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1270.688652][T17789] Bluetooth: hci4: command 0x1003 tx timeout
[ 1270.814397][T17970] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1270.814436][T17970] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1270.814466][T17970] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1270.816994][T17970] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1270.817028][T17970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1270.817051][T17970] usb 5-1: Product: syz
[ 1270.817067][T17970] usb 5-1: Manufacturer: syz
[ 1270.817084][T17970] usb 5-1: SerialNumber: syz
[ 1270.963860][T17970] usb 5-1: config 0 descriptor??
[ 1270.990419][ T4241] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1270.990552][ T4241] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1270.992918][T17970] usb 5-1: ucan: probing device on interface #0
[ 1271.134639][ T4243] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[ 1271.710378][T17970] ucan 5-1:0.0 can0: registered device
[ 1271.822997][T17970] ucan 5-1:0.0 can0: firmware string: unknown
[ 1271.857797][T17970] usb 5-1: USB disconnect, device number 50
[ 1273.796594][T17789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1273.914900][T17789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1273.926154][T17789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1273.948058][T17789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1273.970968][T17789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1274.922774][ T4308] chnl_net:caif_netlink_parms(): no params data found
[ 1275.040837][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1275.041026][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1275.041170][ T4308] bridge_slave_0: entered allmulticast mode
[ 1275.043284][ T4308] bridge_slave_0: entered promiscuous mode
[ 1275.082820][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1275.082956][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1275.083579][ T4308] bridge_slave_1: entered allmulticast mode
[ 1275.103787][ T4308] bridge_slave_1: entered promiscuous mode
[ 1275.198830][ T4308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1275.224827][ T4308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1275.323436][ T4308] team0: Port device team_slave_0 added
[ 1275.327761][ T4308] team0: Port device team_slave_1 added
[ 1275.442341][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1275.442356][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1275.442394][ T4308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1275.444226][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1275.444238][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1275.444260][ T4308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1275.825723][ T4308] hsr_slave_0: entered promiscuous mode
[ 1275.836777][ T4308] hsr_slave_1: entered promiscuous mode
[ 1275.837808][ T4308] debugfs: 'hsr0' already exists in 'hsr'
[ 1275.837835][ T4308] Cannot create hsr debugfs directory
[ 1276.208452][ T4314] Bluetooth: hci3: command tx timeout
[ 1277.026772][ T4308] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1277.575896][ T4308] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1278.132283][ T4308] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1278.291920][ T4314] Bluetooth: hci3: command tx timeout
[ 1278.818072][ T4308] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1279.203663][T29826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1279.288002][T29826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1279.304664][T29826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1279.374362][T29826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1279.375085][T29826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1279.785042][ T4411] Invalid logical block size (65536)
[ 1280.375320][ T4314] Bluetooth: hci3: command tx timeout
[ 1281.116112][ T4308] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1281.161902][ T4308] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1281.192466][ T4308] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1281.320992][ T4308] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1281.355775][ T4308] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1281.428858][ T4308] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1281.498480][ T4308] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1281.569493][ T4308] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1281.654196][ T1380] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1281.729584][ T4314] Bluetooth: hci1: command tx timeout
[ 1282.135738][ T4404] chnl_net:caif_netlink_parms(): no params data found
[ 1282.448877][ T4314] Bluetooth: hci3: command tx timeout
[ 1282.526981][ T4404] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1282.527790][ T4404] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1282.528030][ T4404] bridge_slave_0: entered allmulticast mode
[ 1282.535564][ T4404] bridge_slave_0: entered promiscuous mode
[ 1282.566615][ T4404] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1282.566746][ T4404] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1282.566981][ T4404] bridge_slave_1: entered allmulticast mode
[ 1282.597996][ T4404] bridge_slave_1: entered promiscuous mode
[ 1282.735923][ T4308] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1282.800773][ T4404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1282.823515][ T4404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1282.916524][ T4467] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[ 1282.916550][ T4467] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[ 1282.916727][ T4467] overlayfs: failed to set uuid (2153/file0, err=-13); falling back to uuid=null.
[ 1283.055247][ T4404] team0: Port device team_slave_0 added
[ 1283.057440][ T4308] 8021q: adding VLAN 0 to HW filter on device team0
[ 1283.081871][ T4404] team0: Port device team_slave_1 added
[ 1283.236906][ T4404] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1283.236921][ T4404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1283.236946][ T4404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1283.287704][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1283.287946][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1283.435425][ T4404] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1283.435446][ T4404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1283.435478][ T4404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1283.545320][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1283.545550][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1283.769681][ T4404] hsr_slave_0: entered promiscuous mode
[ 1283.772562][ T4404] hsr_slave_1: entered promiscuous mode
[ 1283.773584][ T4404] debugfs: 'hsr0' already exists in 'hsr'
[ 1283.773611][ T4404] Cannot create hsr debugfs directory
[ 1283.809278][ T4314] Bluetooth: hci1: command tx timeout
[ 1283.862308][ T4477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1285.886263][ T4308] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1285.889842][ T4314] Bluetooth: hci1: command tx timeout
[ 1285.931908][ T4513] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[ 1285.931934][ T4513] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[ 1286.036730][ T4513] overlayfs: failed to set uuid (1228/file0, err=-13); falling back to uuid=null.
[ 1287.207096][ T4308] veth0_vlan: entered promiscuous mode
[ 1287.324818][ T4308] veth1_vlan: entered promiscuous mode
[ 1287.915126][ T4308] veth0_macvtap: entered promiscuous mode
[ 1287.942638][ T4308] veth1_macvtap: entered promiscuous mode
[ 1287.973005][ T4314] Bluetooth: hci1: command tx timeout
[ 1288.063593][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1288.142463][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1288.186958][T27383] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1288.192985][T27383] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1288.209793][   T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1288.237217][   T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1289.853311][T12924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1289.853336][T12924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1290.450076][T27383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1290.450101][T27383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1290.794715][ T4404] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1290.823377][ T4404] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1290.824381][ T4404] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1290.897066][ T4404] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1290.911605][ T4404] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1290.986767][ T4404] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1290.999629][ T4404] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1291.037914][ T4404] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1291.607051][ T4404] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1291.645982][ T4404] 8021q: adding VLAN 0 to HW filter on device team0
[ 1291.684726][ T4611] sctp: [Deprecated]: syz.3.13358 (pid 4611) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1291.684726][ T4611] Use struct sctp_sack_info instead
[ 1291.693167][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1291.693760][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1291.737136][T14524] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1291.737364][T14524] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1292.680746][ T4404] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1294.135579][ T4404] veth0_vlan: entered promiscuous mode
[ 1294.179669][ T4404] veth1_vlan: entered promiscuous mode
[ 1294.537018][ T4404] veth0_macvtap: entered promiscuous mode
[ 1294.603632][ T4404] veth1_macvtap: entered promiscuous mode
[ 1294.727182][ T4404] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1294.864601][ T4404] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1294.927936][T13002] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1294.938367][T13002] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1294.939964][   T43] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1294.940102][   T43] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1295.864932][   T49] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1296.366088][   T49] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1296.366123][   T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1296.440719][   T49] usb 4-1: config 0 descriptor??
[ 1296.509976][   T49] cp210x 4-1:0.0: cp210x converter detected
[ 1296.792264][   T49] usb 4-1: cp210x converter now attached to ttyUSB0
[ 1297.205194][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1297.205217][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1297.662764][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1297.662798][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1298.417150][    T9] usb 4-1: USB disconnect, device number 53
[ 1298.447023][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1298.462495][    T9] cp210x 4-1:0.0: device disconnected
[ 1299.302684][ T4753] netlink: 'syz.0.13392': attribute type 2 has an invalid length.
[ 1299.302709][ T4753] netlink: 'syz.0.13392': attribute type 5 has an invalid length.
[ 1300.293658][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.438482][ T4781] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13401'.
[ 1301.012950][ T4798] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1301.095389][ T4798] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1302.862843][ T4856] loop4: detected capacity change from 0 to 65536
[ 1302.908391][ T4856] loop4: detected capacity change from 65536 to 523370496
[ 1303.213681][ T4863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13429'.
[ 1303.213710][ T4863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13429'.
[ 1305.556503][ T4912] virtiofs: Unknown parameter 'always:     1      V3
[ 1305.556503][ T4912] 				010000E0     1 0:00000000		0
[ 1305.556503][ T4912] 18	nlmon0    :     1      V3
[ 1305.556503][ T4912] 				010000E0     1 0:00000000		0
[ 1305.556503][ T4912] 20	batadv0   :     1      V3
[ 1305.556503][ T4912] 				010000E0     1 0:00000000		0
[ 1305.556503][ T4912] 21	vxcan0    :     1      V3
[ 1305.556503][ T4912] 				010000E0     1 0:00000000		0
[ 1305.556503][ T4912] 22	vxcan1    :     1      V3
[ 1305.556503][ T4912] 				010000E0     1 0:00000000		0
[ 1305.556503][ T4912] 23	veth0     :     1      V3
[ 1305.556503][ T4912] 				010000E0     1 0:00000000		0
[ 1305.556503][ T4912] 24	veth1     :     1      V3
[ 1305.556503][ T4912] 				010000E0     1 0:00000000		0
[ 1305.556503][ T4912] 25	wg0       :     1      V3
[ 1305.556503][ T4912] 				010000E0     1 0:00000000		0
[ 1305.556503][ T4912] 26	wg1       :     1      V3
[ 1305.556503][ T4912] 				010000E0     1 0:00000000		0
[ 1305.556503][ T4912] 27	wg2       :     1      V3
[ 1305.556503][ T4912] 				010000E0     1 0:00000000		0
[ 1305.556503][ T4912] 28	veth0_to_bridge:     1      V3
[ 1305.556503][ T4912] 				010000E0     1 0:00000000		0
[ 1305.556503][ T4912] 29	bridge_slave_0:     1      V3
[ 1305.556503][ T4912] 				010000E0     1 0:00000000		0
[ 1305.556503][ T4912] 30	veth1_to_bridge:     1      V3
[ 1305.556503][ T4912] 				010000E0     1 0:00000000		0
[ 1305.556503][ T4912] 31	bridge_slave_1:     1      V3
[ 1305.556503][ T4912] 				010000E0     1 0:00000000		0
[ 1305.556503][ T4912] 32	veth0_to_bond:     1      V3
[ 1305.556503][ T4912] 				010000E0     1 0:00000000		0
[ 1305.556503][ T4912] 33	bond_slave_0:     1      V3
[ 1305.556503][ T4912] 				010000E0     
[ 1306.528936][   T37] audit: type=1326 audit(2000112139.334:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.6.13447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7827c819 code=0x7fc00000
[ 1307.695941][ T4976] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13466'.
[ 1307.695976][ T4976] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1308.718420][ T5826] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1308.881450][ T5826] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1308.881489][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1308.881504][ T5826] usb 4-1: Product: syz
[ 1308.881515][ T5826] usb 4-1: Manufacturer: syz
[ 1308.881527][ T5826] usb 4-1: SerialNumber: syz
[ 1308.925807][ T5826] usb 4-1: config 0 descriptor??
[ 1309.018717][ T5009] batadv_slave_1: entered promiscuous mode
[ 1309.019473][ T5008] batadv_slave_1: left promiscuous mode
[ 1309.162024][ T5011] vxcan0: tx address claim with dest, not broadcast
[ 1309.754667][ T5826] usb 4-1: Firmware version (0.0) predates our first public release.
[ 1309.754697][ T5826] usb 4-1: Please update to version 0.2 or newer
[ 1309.826216][ T5826] usb 4-1: USB disconnect, device number 54
[ 1310.432331][ T5027] Bluetooth: MGMT ver 1.23
[ 1311.255892][ T5049] input: syz1 as /devices/virtual/input/input100
[ 1312.782746][T27383] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1313.352311][T17970] IPVS: starting estimator thread 0...
[ 1313.448935][ T5098] IPVS: using max 11 ests per chain, 26400 per kthread
[ 1313.768627][ T4567] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1313.918426][ T4567] usb 4-1: Using ep0 maxpacket: 16
[ 1313.922113][ T4567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1313.925134][ T4567] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1313.925172][ T4567] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1313.925188][ T4567] usb 4-1: Product: syz
[ 1313.925200][ T4567] usb 4-1: Manufacturer: syz
[ 1313.925211][ T4567] usb 4-1: SerialNumber: syz
[ 1313.946133][ T4567] usb 4-1: config 0 descriptor??
[ 1313.994654][ T4567] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1313.994690][ T4567] em28xx 4-1:0.0: DVB interface 0 found: bulk
[ 1314.595800][ T4567] em28xx 4-1:0.0: chip ID is em2874
[ 1314.920570][ T4567] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1314.920624][ T4567] em28xx 4-1:0.0: board has no eeprom
[ 1314.978493][ T4567] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1314.978527][ T4567] em28xx 4-1:0.0: dvb set to bulk mode.
[ 1314.978647][ T5826] em28xx 4-1:0.0: Binding DVB extension
[ 1315.041473][ T4567] usb 4-1: USB disconnect, device number 55
[ 1315.044487][ T4567] em28xx 4-1:0.0: Disconnecting em28xx
[ 1315.827871][ T5826] em28xx 4-1:0.0: Registering input extension
[ 1316.041360][ T5132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13537'.
[ 1316.042387][ T5132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13537'.
[ 1316.098372][ T5826] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[ 1316.098391][ T5826] Registered IR keymap rc-empty
[ 1316.525596][ T5826] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1316.595385][ T5826] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input101
[ 1316.728681][ T5826] em28xx 4-1:0.0: Input extension successfully initialized
[ 1316.729744][ T4567] em28xx 4-1:0.0: Closing input extension
[ 1317.259258][ T4567] em28xx 4-1:0.0: Freeing device
[ 1319.086373][T29826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1319.177839][T29826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1319.197184][T29826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1319.277495][T29826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1319.279098][T29826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1319.980288][ T5161] netlink: 220 bytes leftover after parsing attributes in process `syz.6.13547'.
[ 1319.980319][ T5161] netlink: 'syz.6.13547': attribute type 2 has an invalid length.
[ 1320.663362][ T5144] chnl_net:caif_netlink_parms(): no params data found
[ 1320.792039][ T5177] loop8: detected capacity change from 0 to 7
[ 1320.793857][ T5177]  loop8: [POWERTEC]
[ 1321.113812][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1321.114051][ T5144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1321.114349][ T5144] bridge_slave_0: entered allmulticast mode
[ 1321.117309][ T5144] bridge_slave_0: entered promiscuous mode
[ 1321.226651][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1321.226806][ T5144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1321.227111][ T5144] bridge_slave_1: entered allmulticast mode
[ 1321.240499][ T5144] bridge_slave_1: entered promiscuous mode
[ 1321.359021][ T5144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1321.392984][ T5144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1321.486924][ T5144] team0: Port device team_slave_0 added
[ 1321.536099][ T5144] team0: Port device team_slave_1 added
[ 1321.664199][ T4314] Bluetooth: hci4: command tx timeout
[ 1321.982852][ T5144] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1321.982873][ T5144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1321.982905][ T5144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1322.001551][ T5144] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1322.001574][ T5144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1322.001608][ T5144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1322.429077][ T5144] hsr_slave_0: entered promiscuous mode
[ 1322.430502][ T5144] hsr_slave_1: entered promiscuous mode
[ 1322.431232][ T5144] debugfs: 'hsr0' already exists in 'hsr'
[ 1322.431251][ T5144] Cannot create hsr debugfs directory
[ 1323.110164][ T5208] overlay: ./file0 is not a directory
[ 1323.676201][ T5144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1323.728685][ T4314] Bluetooth: hci4: command tx timeout
[ 1323.783750][ T5213] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1324.557402][ T5144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1325.124907][ T5144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1325.693315][ T5144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1325.808654][ T4314] Bluetooth: hci4: command tx timeout
[ 1326.775017][ T5144] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1326.812466][ T5144] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1326.813360][ T5144] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1326.900139][ T5144] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1326.901223][ T5144] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1326.943630][ T5144] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1326.945218][ T5144] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1326.991143][ T5144] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1327.301326][ T5144] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1327.342012][ T5144] 8021q: adding VLAN 0 to HW filter on device team0
[ 1327.357268][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1327.357606][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1327.419128][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1327.420174][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1327.803208][ T5144] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1327.890684][ T4314] Bluetooth: hci4: command tx timeout
[ 1328.125757][ T5144] veth0_vlan: entered promiscuous mode
[ 1328.145892][ T5144] veth1_vlan: entered promiscuous mode
[ 1328.183802][ T5144] veth0_macvtap: entered promiscuous mode
[ 1328.191460][ T5144] veth1_macvtap: entered promiscuous mode
[ 1328.226977][ T5144] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1328.259783][ T5144] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1328.267246][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1328.267507][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1328.267549][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1328.267590][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1329.539991][ T5304] virtiofs: Unknown parameter 'always0000000		0
[ 1329.539991][ T5304] 20	batadv0   :     1      V3
[ 1329.539991][ T5304] 				010000E0     1 0:00000000		0
[ 1329.539991][ T5304] 21	vxcan0    :     1      V3
[ 1329.539991][ T5304] 				010000E0     1 0:00000000		0
[ 1329.539991][ T5304] 22	vxcan1    :     1      V3
[ 1329.539991][ T5304] 				010000E0     1 0:00000000		0
[ 1329.539991][ T5304] 23	veth0     :     1      V3
[ 1329.539991][ T5304] 				010000E0     1 0:00000000		0
[ 1329.539991][ T5304] 24	veth1     :     1      V3
[ 1329.539991][ T5304] 				010000E0     1 0:00000000		0
[ 1329.539991][ T5304] 25	wg0       :     1      V3
[ 1329.539991][ T5304] 				010000E0     1 0:00000000		0
[ 1329.539991][ T5304] 26	wg1       :     1      V3
[ 1329.539991][ T5304] 				010000E0     1 0:00000000		0
[ 1329.539991][ T5304] 27	wg2       :     1      V3
[ 1329.539991][ T5304] 				010000E0     1 0:00000000		0
[ 1329.539991][ T5304] 28	veth0_to_bridge:     1      V3
[ 1329.539991][ T5304] 				010000E0     1 0:00000000		0
[ 1329.539991][ T5304] 29	bridge_slave_0:     1      V3
[ 1329.539991][ T5304] 				010000E0     1 0:00000000		0
[ 1329.539991][ T5304] 30	veth1_to_bridge:     1      V3
[ 1329.539991][ T5304] 				010000E0     1 0:00000000		0
[ 1329.539991][ T5304] 31	bridge_slave_1:     1      V3
[ 1329.539991][ T5304] 				010000E0     1 0:00000000		0
[ 1329.539991][ T5304] 32	veth0_to_bond:     1      V3
[ 1329.539991][ T5304] 				010000E0     1 0:00000000		0
[ 1329.539991][ T5304] 33	bond_slave_0:     1      V3
[ 1329.539991][ T5304] 				010000E0     1 0:00000000		0
[ 1329.539991][ T5304] 34	veth1_to_bond:     1      V3
[ 1329.539991][ T5304] 				010000E0     1 0:00000000		0
[ 1329.539991][ T5304] 35	bond_slave_1:   
[ 1329.937682][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1329.937708][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1330.382725][ T1464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1330.382750][ T1464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1330.705826][ T5321] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1330.724206][ T5321] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1330.882224][ T5325] netlink: 72 bytes leftover after parsing attributes in process `syz.6.13606'.
[ 1332.028092][T29826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1332.113433][T29826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1332.115909][T29826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1332.154803][T29826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1332.163272][T29826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1334.212020][   T37] audit: type=1326 audit(2000112173.020:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5406 comm="syz.5.13641" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d6b29c819 code=0x0
[ 1334.448496][ T4314] Bluetooth: hci5: command tx timeout
[ 1334.507776][ T5352] chnl_net:caif_netlink_parms(): no params data found
[ 1334.989384][ T5352] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1334.990567][ T5352] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1334.990874][ T5352] bridge_slave_0: entered allmulticast mode
[ 1334.996523][ T5352] bridge_slave_0: entered promiscuous mode
[ 1335.030659][ T5352] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1335.032999][ T5352] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1335.033299][ T5352] bridge_slave_1: entered allmulticast mode
[ 1335.035498][ T5352] bridge_slave_1: entered promiscuous mode
[ 1335.274245][ T5352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1335.278043][ T5352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1335.591301][ T5352] team0: Port device team_slave_0 added
[ 1335.654403][ T5435] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13652'.
[ 1335.751049][ T5352] team0: Port device team_slave_1 added
[ 1335.921997][ T5352] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1335.922018][ T5352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1335.922049][ T5352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1335.925104][ T5352] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1335.925124][ T5352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1335.925155][ T5352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1336.167344][ T5352] hsr_slave_0: entered promiscuous mode
[ 1336.174799][ T5352] hsr_slave_1: entered promiscuous mode
[ 1336.175560][ T5352] debugfs: 'hsr0' already exists in 'hsr'
[ 1336.175580][ T5352] Cannot create hsr debugfs directory
[ 1336.531248][ T4314] Bluetooth: hci5: command tx timeout
[ 1338.612642][ T4314] Bluetooth: hci5: command tx timeout
[ 1338.717245][ T5504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13670'.
[ 1339.031891][ T5510] Cache volume key already in use (9p,(null),)
[ 1340.159064][ T5524] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13676'.
[ 1340.731831][ T4314] Bluetooth: hci5: command tx timeout
[ 1343.447896][T15898] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 1343.598446][T15898] usb 6-1: Using ep0 maxpacket: 32
[ 1343.621434][T15898] usb 6-1: config 2 has an invalid interface number: 88 but max is 0
[ 1343.621466][T15898] usb 6-1: config 2 has no interface number 0
[ 1343.621517][T15898] usb 6-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[ 1343.621548][T15898] usb 6-1: config 2 interface 88 has no altsetting 0
[ 1343.625009][T15898] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[ 1343.625046][T15898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1343.625071][T15898] usb 6-1: Product: syz
[ 1343.625088][T15898] usb 6-1: Manufacturer: syz
[ 1343.625105][T15898] usb 6-1: SerialNumber: syz
[ 1343.694289][ T5583] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1343.708859][ T1036] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1343.927480][ T5583] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1344.533152][T15898] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1344.533438][T15898] asix 6-1:2.88: probe with driver asix failed with error -71
[ 1344.586893][T15898] usb 6-1: USB disconnect, device number 53
[ 1344.781357][ T5352] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1344.847551][ T5352] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1344.860286][ T5352] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1344.977949][ T5608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13696'.
[ 1345.004046][ T5352] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1345.007466][ T5352] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1345.292873][ T5352] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1345.301385][ T5352] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1345.401741][ T5352] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1345.703079][ T5638] veth1_virt_wifi: entered allmulticast mode
[ 1345.705326][ T5638] veth1_virt_wifi: left allmulticast mode
[ 1346.166264][ T5352] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1346.358697][ T5352] 8021q: adding VLAN 0 to HW filter on device team0
[ 1346.799972][ T4690] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1346.800183][ T4690] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1346.910210][ T5826] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 1346.913832][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1346.913969][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1347.059037][ T5826] usb 6-1: Using ep0 maxpacket: 8
[ 1347.062523][ T5826] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1347.062562][ T5826] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1347.062590][ T5826] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1347.062616][ T5826] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1347.062672][ T5826] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1347.062698][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1347.395363][ T5826] usb 6-1: GET_CAPABILITIES returned 0
[ 1347.395420][ T5826] usbtmc 6-1:16.0: can't read capabilities
[ 1347.722102][   T49] usb 6-1: USB disconnect, device number 54
[ 1347.982914][ T5681] loop4: detected capacity change from 0 to 524287936
[ 1348.712356][ T5352] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1348.994607][ T5681] Dev loop4: unable to read RDB block 8
[ 1348.994871][ T5681]  loop4: unable to read partition table
[ 1348.995124][ T5681] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[ 1349.336812][ T5714] netlink: 'syz.5.13722': attribute type 27 has an invalid length.
[ 1349.336840][ T5714] netlink: 'syz.5.13722': attribute type 1 has an invalid length.
[ 1350.716083][ T5352] veth0_vlan: entered promiscuous mode
[ 1350.751692][ T5352] veth1_vlan: entered promiscuous mode
[ 1350.879845][ T5352] veth0_macvtap: entered promiscuous mode
[ 1350.911915][ T5352] veth1_macvtap: entered promiscuous mode
[ 1350.948817][ T5352] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1350.979519][ T5352] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1351.044530][ T1464] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1351.112530][ T1464] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1351.115232][ T1380] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1351.144547][ T1380] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1353.018369][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1353.018391][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1353.511118][ T4567] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 1353.678380][ T4567] usb 6-1: Using ep0 maxpacket: 32
[ 1353.680696][ T4567] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[ 1353.680725][ T4567] usb 6-1: config 0 has no interface number 0
[ 1353.698658][ T4567] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1353.698748][ T4567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1353.698815][ T4567] usb 6-1: Product: syz
[ 1353.698859][ T4567] usb 6-1: Manufacturer: syz
[ 1353.698904][ T4567] usb 6-1: SerialNumber: syz
[ 1353.851912][ T4567] usb 6-1: config 0 descriptor??
[ 1353.900783][ T4567] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1354.064684][ T1464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1354.064707][ T1464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1354.213109][ T5787] netlink: 56537 bytes leftover after parsing attributes in process `syz.6.13744'.
[ 1354.318265][ T5774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1354.318835][ T5774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1354.512610][ T4567] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1354.529015][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1354.603801][ T4567] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1354.651143][ T4567] usb 6-1: USB disconnect, device number 55
[ 1354.682811][ T4567] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1354.760762][ T4567] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1354.805063][ T4567] quatech2 6-1:0.51: device disconnected
[ 1355.289149][ T5817] netlink: 'syz.0.13751': attribute type 1 has an invalid length.
[ 1355.289240][ T5817] netlink: 'syz.0.13751': attribute type 2 has an invalid length.
[ 1355.289256][ T5817] netlink: 'syz.0.13751': attribute type 1 has an invalid length.
[ 1356.133259][ T5846] netlink: 92 bytes leftover after parsing attributes in process `syz.5.13758'.
[ 1357.019425][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13768'.
[ 1357.019468][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13768'.
[ 1361.400006][ T4567] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1361.551346][ T4567] usb 10-1: Using ep0 maxpacket: 16
[ 1361.555005][ T4567] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1361.555061][ T4567] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1361.555093][ T4567] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1361.555118][ T4567] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1361.555145][ T4567] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1361.556495][ T4567] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1361.556526][ T4567] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1361.556550][ T4567] usb 10-1: Manufacturer: syz
[ 1361.632005][ T4567] usb 10-1: config 0 descriptor??
[ 1361.648302][ T5869] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 1361.764605][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.843528][ T5869] usb 6-1: Using ep0 maxpacket: 32
[ 1361.867848][ T5869] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1361.867881][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1361.896377][ T5869] usb 6-1: config 0 descriptor??
[ 1362.098488][ T4567] rc_core: IR keymap rc-hauppauge not found
[ 1362.098512][ T4567] Registered IR keymap rc-empty
[ 1362.098668][ T4567] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1362.123784][ T4567] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1362.137806][ T5869] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1362.151327][ T4567] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[ 1362.156526][ T4567] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input102
[ 1362.186506][ T4567] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1362.201974][ T4567] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1362.212815][ T5869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1362.215515][ T5869] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1362.215578][ T5869] usb 6-1: media controller created
[ 1362.240208][ T4567] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1362.264370][ T4567] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1362.279550][ T4567] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1362.300129][ T4567] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1362.302721][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1362.325960][ T4567] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1362.338451][ T4567] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1362.382221][ T4567] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1362.399078][ T4567] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1362.418483][ T4567] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1362.424983][ T5869] az6027: usb out operation failed. (-71)
[ 1362.446951][ T5869] az6027: usb out operation failed. (-71)
[ 1362.446972][ T5869] stb0899_attach: Driver disabled by Kconfig
[ 1362.446984][ T5869] az6027: no front-end attached
[ 1362.446984][ T5869] 
[ 1362.447415][ T5869] az6027: usb out operation failed. (-71)
[ 1362.447433][ T5869] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1362.505304][ T5869] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input103
[ 1362.526858][ T4567] mceusb 10-1:0.0: Registered  with mce emulator interface version 1
[ 1362.526886][ T4567] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1362.546927][ T5869] dvb-usb: schedule remote query interval to 400 msecs.
[ 1362.546952][ T5869] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1362.577225][ T5869] usb 6-1: USB disconnect, device number 56
[ 1362.648442][ T4567] usb 10-1: USB disconnect, device number 7
[ 1362.954480][ T5869] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1363.919247][T17970] kernel read not supported for file /radio0 (pid: 17970 comm: kworker/1:7)
[ 1366.103729][ T6164] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.13868'.
[ 1366.194231][ T6165] pim6reg: entered allmulticast mode
[ 1366.220856][ T6165] pim6reg: left allmulticast mode
[ 1366.756258][ T6183] Bluetooth: MGMT ver 1.23
[ 1366.770116][ T6185] vxcan1: tx drop: invalid da for name 0xfffffffffffffffc
[ 1368.525426][ T6233] binder: 6231:6233 ioctl c0306201 2000000001c0 returned -14
[ 1370.716250][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13907'.
[ 1371.141846][   T37] audit: type=1326 audit(2000112209.950:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.5.13910" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d6b29c819 code=0x0
[ 1371.555518][   T37] audit: type=1326 audit(2000112210.360:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.6.13913" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f7827c819 code=0x0
[ 1371.752805][ T6283] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[ 1371.752847][ T6283] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1372.426446][ T6291] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1372.823110][ T6297] syzkaller1: entered promiscuous mode
[ 1372.823141][ T6297] syzkaller1: entered allmulticast mode
[ 1373.616797][ T6316] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13930'.
[ 1374.838730][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1375.458318][ T4567] usb 6-1: new low-speed USB device number 57 using dummy_hcd
[ 1375.620281][ T4567] usb 6-1: config index 0 descriptor too short (expected 6427, got 27)
[ 1375.620312][ T4567] usb 6-1: config 0 has an invalid interface number: 21 but max is 0
[ 1375.620335][ T4567] usb 6-1: config 0 has no interface number 0
[ 1375.620384][ T4567] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[ 1375.620412][ T4567] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1375.620430][ T4567] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1375.630803][ T4567] usb 6-1: config 0 descriptor??
[ 1375.701794][ T6350] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1376.343771][ T4567] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input104
[ 1376.595123][ T4567] usb 6-1: USB disconnect, device number 57
[ 1376.595255][    C0] keyspan_remote 6-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[ 1376.595608][ T6216] Set syz1 is full, maxelem 65536 reached
[ 1377.047274][   T37] audit: type=1326 audit(2000112215.850:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.9.13950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcca89c819 code=0x7ffc0000
[ 1377.047471][   T37] audit: type=1326 audit(2000112215.850:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.9.13950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcca89c819 code=0x7ffc0000
[ 1377.048000][   T37] audit: type=1326 audit(2000112215.850:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.9.13950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdcca89c819 code=0x7ffc0000
[ 1377.079849][   T37] audit: type=1326 audit(2000112215.860:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.9.13950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcca89c819 code=0x7ffc0000
[ 1377.080007][   T37] audit: type=1326 audit(2000112215.860:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.9.13950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcca89c819 code=0x7ffc0000
[ 1377.423313][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13953'.
[ 1377.423343][ T6368] block nbd5: Unsupported socket: should be TCP or UNIX.
[ 1377.778326][ T5906] usb 6-1: new full-speed USB device number 58 using dummy_hcd
[ 1377.950774][ T5906] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[ 1377.950805][ T5906] usb 6-1: config 0 has no interface number 0
[ 1377.950856][ T5906] usb 6-1: config 0 interface 41 has no altsetting 0
[ 1378.000393][ T5906] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1378.000429][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1378.000446][ T5906] usb 6-1: Product: syz
[ 1378.000457][ T5906] usb 6-1: Manufacturer: syz
[ 1378.000469][ T5906] usb 6-1: SerialNumber: syz
[ 1378.047929][ T5906] usb 6-1: config 0 descriptor??
[ 1378.244476][ T6381] program syz.9.13959 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1378.912470][ T5906] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9
[ 1378.915228][ T5906] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71
[ 1378.959139][ T5906] usb 6-1: USB disconnect, device number 58
[ 1379.948383][ T5906] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 1380.101024][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13975'.
[ 1380.130192][ T5906] usb 6-1: config 0 has no interfaces?
[ 1380.130231][ T5906] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1380.130259][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1380.156610][ T5906] usb 6-1: config 0 descriptor??
[ 1380.382566][ T6417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1380.384650][ T6417] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1380.387972][ T1250] usb 6-1: USB disconnect, device number 59
[ 1380.868381][ T1250] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1381.018637][ T1250] usb 10-1: Using ep0 maxpacket: 16
[ 1381.024618][ T1250] usb 10-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1381.024658][ T1250] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1381.024695][ T1250] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1381.024721][ T1250] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1381.072639][ T1250] usb 10-1: config 0 descriptor??
[ 1381.074252][ T6441] Bluetooth: MGMT ver 1.23
[ 1381.074304][ T6441] Bluetooth: hci1: invalid length 3, exp 2 for type 4
[ 1381.509518][ T1250] mcp2221 0003:04D8:00DD.00B5: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0
[ 1381.922563][   T49] usb 10-1: USB disconnect, device number 8
[ 1383.073079][ T6486] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1383.090379][   T10] IPVS: starting estimator thread 0...
[ 1383.178409][ T6488] IPVS: using max 8 ests per chain, 19200 per kthread
[ 1385.158384][ T1250] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 1385.199843][ T5869] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1385.308338][ T1250] usb 6-1: Using ep0 maxpacket: 32
[ 1385.314852][ T1250] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[ 1385.314879][ T1250] usb 6-1: config 0 has no interface number 0
[ 1385.317383][ T1250] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1385.317416][ T1250] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1385.317438][ T1250] usb 6-1: Product: syz
[ 1385.317449][ T1250] usb 6-1: Manufacturer: syz
[ 1385.317460][ T1250] usb 6-1: SerialNumber: syz
[ 1385.348855][ T5869] usb 10-1: Using ep0 maxpacket: 16
[ 1385.383471][ T1250] usb 6-1: config 0 descriptor??
[ 1385.384854][ T5869] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1385.384888][ T5869] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1385.423731][ T5869] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1385.423766][ T5869] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1385.423791][ T5869] usb 10-1: Product: syz
[ 1385.423803][ T5869] usb 10-1: Manufacturer: syz
[ 1385.423814][ T5869] usb 10-1: SerialNumber: syz
[ 1385.477349][ T5869] usb 10-1: config 0 descriptor??
[ 1385.511107][ T5869] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1385.511160][ T5869] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class)
[ 1386.112750][ T5869] em28xx 10-1:0.0: unknown em28xx chip ID (0)
[ 1386.119953][ T5869] em28xx 10-1:0.0: Config register raw data: 0x41
[ 1386.247138][ T1250] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[ 1386.334886][T17970] usb 10-1: USB disconnect, device number 9
[ 1386.347084][T17970] em28xx 10-1:0.0: Disconnecting em28xx
[ 1386.384957][T17970] em28xx 10-1:0.0: Freeing device
[ 1386.448591][ T1250] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 1386.448895][ T1250] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[ 1386.479912][ T1250] usb 6-1: USB disconnect, device number 60
[ 1387.627312][ T4567] IPVS: starting estimator thread 0...
[ 1387.627312][ T6540] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1387.708535][ T6542] IPVS: using max 11 ests per chain, 26400 per kthread
[ 1389.598961][ T6592] : renamed from veth0_vlan (while UP)
[ 1390.008397][ T5869] usb 6-1: new full-speed USB device number 61 using dummy_hcd
[ 1390.173332][ T5869] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1390.173365][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1390.173381][ T5869] usb 6-1: Product: syz
[ 1390.173392][ T5869] usb 6-1: Manufacturer: syz
[ 1390.173404][ T5869] usb 6-1: SerialNumber: syz
[ 1390.177736][ T5869] usb 6-1: config 0 descriptor??
[ 1390.247997][ T5869] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1390.421142][ T6599] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[ 1390.421164][ T6599] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1390.426519][ T6599] vhci_hcd vhci_hcd.0: Device attached
[ 1390.748581][ T5906] usb 44-1: SetAddress Request (2) to port 0
[ 1390.748698][ T5906] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd
[ 1390.834102][ T6605] vhci_hcd: connection reset by peer
[ 1390.834197][ T5869] gspca_stk1135: reg_w 0x3 err -71
[ 1390.835262][ T5869] gspca_stk1135: serial bus timeout: status=0x00
[ 1390.835276][ T5869] gspca_stk1135: Sensor write failed
[ 1390.835306][ T5869] gspca_stk1135: serial bus timeout: status=0x00
[ 1390.835316][ T5869] gspca_stk1135: Sensor write failed
[ 1390.835346][ T5869] gspca_stk1135: serial bus timeout: status=0x00
[ 1390.835355][ T5869] gspca_stk1135: Sensor read failed
[ 1390.835383][ T5869] gspca_stk1135: serial bus timeout: status=0x00
[ 1390.835392][ T5869] gspca_stk1135: Sensor read failed
[ 1390.835399][ T5869] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1390.835432][ T5869] gspca_stk1135: serial bus timeout: status=0x00
[ 1390.835441][ T5869] gspca_stk1135: Sensor read failed
[ 1390.835470][ T5869] gspca_stk1135: serial bus timeout: status=0x00
[ 1390.835479][ T5869] gspca_stk1135: Sensor read failed
[ 1390.835509][ T5869] gspca_stk1135: serial bus timeout: status=0x00
[ 1390.835517][ T5869] gspca_stk1135: Sensor write failed
[ 1390.835546][ T5869] gspca_stk1135: serial bus timeout: status=0x00
[ 1390.835554][ T5869] gspca_stk1135: Sensor write failed
[ 1390.835631][ T5869] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71
[ 1390.972758][   T43] vhci_hcd vhci_hcd.5: stop threads
[ 1390.972854][   T43] vhci_hcd vhci_hcd.5: release socket
[ 1390.972913][   T43] vhci_hcd vhci_hcd.5: disconnect device
[ 1390.995099][ T5869] usb 6-1: USB disconnect, device number 61
[ 1391.198399][T17970] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1391.348357][T17970] usb 10-1: Using ep0 maxpacket: 8
[ 1391.350795][T17970] usb 10-1: config 179 has an invalid interface number: 65 but max is 0
[ 1391.350826][T17970] usb 10-1: config 179 has no interface number 0
[ 1391.350871][T17970] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1391.350892][T17970] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1391.350913][T17970] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1391.350934][T17970] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1391.350954][T17970] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1391.350988][T17970] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1391.351006][T17970] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1391.358758][ T6608] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22
[ 1391.788655][ T6608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1391.789219][ T6608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1392.107460][ T4567] usb 10-1: USB disconnect, device number 10
[ 1392.116696][    C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1392.116768][    C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1392.318038][   T32] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input105
[ 1392.333984][T15898] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 1392.489320][T15898] usb 6-1: Using ep0 maxpacket: 32
[ 1392.491413][T15898] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[ 1392.491443][T15898] usb 6-1: config 0 has no interface number 0
[ 1392.521370][T15898] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1392.521404][T15898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1392.521427][T15898] usb 6-1: Product: syz
[ 1392.521444][T15898] usb 6-1: Manufacturer: syz
[ 1392.521461][T15898] usb 6-1: SerialNumber: syz
[ 1392.565667][T15898] usb 6-1: config 0 descriptor??
[ 1392.596454][T15898] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1392.797903][ T6618] : renamed from veth0_vlan (while UP)
[ 1392.798026][T15898] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1392.835245][T15898] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1393.225777][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1393.226446][ T4701] usb 6-1: USB disconnect, device number 62
[ 1393.256331][ T4701] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1393.283844][ T4701] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1393.284947][ T4701] quatech2 6-1:0.51: device disconnected
[ 1393.783798][   T37] audit: type=1326 audit(2000112232.590:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6631 comm="syz.9.14067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcca89c819 code=0x0
[ 1393.867411][ T6634] netlink: 84 bytes leftover after parsing attributes in process `syz.5.14069'.
[ 1393.867436][ T6634] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1395.808878][ T5906] usb 44-1: device descriptor read/8, error -110
[ 1396.229779][ T5906] usb usb44-port1: attempt power cycle
[ 1396.263663][ T6690] input: syz0 as /devices/virtual/input/input106
[ 1396.278385][   T10] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1396.401023][ T4567] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1396.428367][   T10] usb 6-1: Using ep0 maxpacket: 32
[ 1396.431671][   T10] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[ 1396.431701][   T10] usb 6-1: config 0 has no interface number 0
[ 1396.431761][   T10] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1396.436313][   T10] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1396.436345][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1396.436369][   T10] usb 6-1: Product: syz
[ 1396.436386][   T10] usb 6-1: Manufacturer: syz
[ 1396.436404][   T10] usb 6-1: SerialNumber: syz
[ 1396.506520][   T10] usb 6-1: config 0 descriptor??
[ 1396.507958][ T6684] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1396.588352][ T4567] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1396.588515][ T4567] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1396.588540][ T4567] usb 10-1: Product: syz
[ 1396.588794][ T4567] usb 10-1: Manufacturer: syz
[ 1396.588813][ T4567] usb 10-1: SerialNumber: syz
[ 1396.637611][ T4567] usb 10-1: config 0 descriptor??
[ 1396.731222][ T6684] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1396.801541][ T5906] usb usb44-port1: unable to enumerate USB device
[ 1397.147375][   T10] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[ 1397.147836][ T4567] usb 10-1: Firmware: major: 0, minor: 0, hardware type: RZUSB (3)
[ 1397.147856][ T4567] usb 10-1: Firmware version (0.0) predates our first public release.
[ 1397.147871][ T4567] usb 10-1: Please update to version 0.2 or newer
[ 1397.148518][   T10] asix 6-1:0.188: probe with driver asix failed with error -61
[ 1397.437085][ T4567] usb 10-1: USB disconnect, device number 11
[ 1398.047398][ T6713] input: syz0 as /devices/virtual/input/input107
[ 1399.023343][ T1250] usb 6-1: USB disconnect, device number 63
[ 1399.149223][ T6719] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.14105'.
[ 1399.648353][T29826] Bluetooth: hci3: command 0x0406 tx timeout
[ 1400.198041][ T6747] syzkaller1: entered promiscuous mode
[ 1400.198072][ T6747] syzkaller1: entered allmulticast mode
[ 1401.382935][ T6777] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14133'.
[ 1401.711670][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1401.759163][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1401.759300][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1402.219114][   T32] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 1402.341957][ T6802] netlink: 104 bytes leftover after parsing attributes in process `syz.5.14144'.
[ 1402.390764][   T32] usb 10-1: Using ep0 maxpacket: 16
[ 1402.395866][   T32] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1402.422439][   T32] usb 10-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05
[ 1402.422474][   T32] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1402.422499][   T32] usb 10-1: Product: syz
[ 1402.422516][   T32] usb 10-1: Manufacturer: syz
[ 1402.422534][   T32] usb 10-1: SerialNumber: syz
[ 1402.639538][ T6808] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1402.697639][   T32] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[ 1403.085514][   T32] gspca_vc032x: reg_w err -71
[ 1403.085534][   T32] gspca_vc032x: I2c Bus Busy Wait 00
[ 1403.085546][   T32] gspca_vc032x: I2c Bus Busy Wait 00
[ 1403.085556][   T32] gspca_vc032x: I2c Bus Busy Wait 00
[ 1403.085567][   T32] gspca_vc032x: I2c Bus Busy Wait 00
[ 1403.085577][   T32] gspca_vc032x: I2c Bus Busy Wait 00
[ 1403.085587][   T32] gspca_vc032x: I2c Bus Busy Wait 00
[ 1403.085598][   T32] gspca_vc032x: I2c Bus Busy Wait 00
[ 1403.085608][   T32] gspca_vc032x: I2c Bus Busy Wait 00
[ 1403.085619][   T32] gspca_vc032x: I2c Bus Busy Wait 00
[ 1403.085629][   T32] gspca_vc032x: I2c Bus Busy Wait 00
[ 1403.085638][   T32] gspca_vc032x: I2c Bus Busy Wait 00
[ 1403.085648][   T32] gspca_vc032x: I2c Bus Busy Wait 00
[ 1403.085658][   T32] gspca_vc032x: I2c Bus Busy Wait 00
[ 1403.085667][   T32] gspca_vc032x: I2c Bus Busy Wait 00
[ 1403.085694][   T32] gspca_vc032x: I2c Bus Busy Wait 00
[ 1403.085706][   T32] gspca_vc032x: I2c Bus Busy Wait 00
[ 1403.085717][   T32] gspca_vc032x: I2c Bus Busy Wait 00
[ 1403.085727][   T32] gspca_vc032x: I2c Bus Busy Wait 00
[ 1403.085738][   T32] gspca_vc032x: I2c Bus Busy Wait 00
[ 1403.085749][   T32] gspca_vc032x: Unknown sensor...
[ 1403.085839][   T32] vc032x 10-1:12.0: probe with driver vc032x failed with error -22
[ 1403.233120][   T32] usb 10-1: USB disconnect, device number 12
[ 1403.951172][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14160'.
[ 1404.538572][ T4567] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1404.591810][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14172'.
[ 1404.695500][ T4567] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1404.695561][ T4567] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1404.695590][ T4567] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1404.736779][ T4567] usb 10-1: config 0 descriptor??
[ 1404.759617][ T4567] pwc: Askey VC010 type 2 USB webcam detected.
[ 1405.176210][ T4567] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1405.177506][ T4567] pwc: recv_control_msg error -32 req 02 val 2700
[ 1405.395063][ T4567] pwc: recv_control_msg error -71 req 04 val 1000
[ 1405.396371][ T4567] pwc: recv_control_msg error -71 req 04 val 1300
[ 1405.397180][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14180'.
[ 1405.397224][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14180'.
[ 1405.397259][ T4567] pwc: recv_control_msg error -71 req 04 val 1400
[ 1405.399935][ T4567] pwc: recv_control_msg error -71 req 02 val 2000
[ 1405.416668][ T4567] pwc: recv_control_msg error -71 req 02 val 2100
[ 1405.428061][ T4567] pwc: recv_control_msg error -71 req 04 val 1500
[ 1405.474390][ T4567] pwc: recv_control_msg error -71 req 02 val 2500
[ 1405.478046][ T4567] pwc: recv_control_msg error -71 req 02 val 2400
[ 1405.484308][ T4567] pwc: recv_control_msg error -71 req 02 val 2600
[ 1405.503904][ T4567] pwc: recv_control_msg error -71 req 02 val 2900
[ 1405.505347][ T4567] pwc: recv_control_msg error -71 req 02 val 2800
[ 1405.516297][ T4567] pwc: recv_control_msg error -71 req 04 val 1100
[ 1405.528728][ T4567] pwc: recv_control_msg error -71 req 04 val 1200
[ 1405.752856][ T4567] pwc: Registered as video103.
[ 1405.762828][ T4567] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input108
[ 1405.868820][T27383] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1405.975065][ T4567] usb 10-1: USB disconnect, device number 13
[ 1406.243269][ T6899] dvmrp0: entered allmulticast mode
[ 1406.603742][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14192'.
[ 1406.603786][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14192'.
[ 1407.305197][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14200'.
[ 1408.309666][ T6968] netlink: 65039 bytes leftover after parsing attributes in process `syz.9.14215'.
[ 1408.761286][ T6981] netlink: 'syz.6.14229': attribute type 83 has an invalid length.
[ 1408.881320][ T6985] pim6reg: entered allmulticast mode
[ 1408.916418][ T6985] pim6reg: left allmulticast mode
[ 1409.288332][ T4701] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1409.454656][ T4701] usb 10-1: Using ep0 maxpacket: 8
[ 1409.466986][ T4701] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 1409.480970][ T4701] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 1409.481005][ T4701] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 1409.481031][ T4701] usb 10-1: Product: syz
[ 1409.481047][ T4701] usb 10-1: Manufacturer: syz
[ 1409.481063][ T4701] usb 10-1: SerialNumber: syz
[ 1409.763302][ T4701] usb 10-1: Handspring Visor / Palm OS: No valid connect info available
[ 1409.763330][ T4701] usb 10-1: Handspring Visor / Palm OS: port 48, is for unknown use
[ 1409.763353][ T4701] usb 10-1: Handspring Visor / Palm OS: port 0, is for Debugger use
[ 1409.763385][ T4701] usb 10-1: Handspring Visor / Palm OS: Number of ports: 2
[ 1409.965594][ T4701] usb 10-1: palm_os_3_probe - error -71 getting bytes available request
[ 1409.965692][ T4701] visor 10-1:1.0: Handspring Visor / Palm OS converter detected
[ 1409.999570][ T4701] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1410.020983][ T4701] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1410.039343][ T4701] usb 10-1: USB disconnect, device number 14
[ 1410.074438][ T4701] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1410.138402][ T4701] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1410.140492][ T4701] visor 10-1:1.0: device disconnected
[ 1410.216833][ T7020] vxcan1: tx drop: invalid da for name 0xfffffffffffffffc
[ 1412.442637][ T5306] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1412.648356][ T5306] usb 10-1: Using ep0 maxpacket: 16
[ 1412.651319][ T5306] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8
[ 1412.656307][ T5306] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1412.656341][ T5306] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1412.656364][ T5306] usb 10-1: Product: syz
[ 1412.656381][ T5306] usb 10-1: Manufacturer: syz
[ 1412.656398][ T5306] usb 10-1: SerialNumber: syz
[ 1412.753710][ T5306] usb 10-1: config 0 descriptor??
[ 1412.792835][ T5306] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected
[ 1412.833162][ T5306] usb 10-1: Detected FT232R
[ 1413.119662][   T10] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1413.277510][ T7081] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1413.521153][   T10] usb 6-1: Using ep0 maxpacket: 8
[ 1413.524518][   T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 1413.524578][   T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1413.524666][   T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1413.524696][   T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1413.524724][   T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1413.524830][   T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1413.524857][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1414.104854][   T10] usb 6-1: usb_control_msg returned -32
[ 1414.104906][   T10] usbtmc 6-1:16.0: can't read capabilities
[ 1414.243983][ T5306] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1414.283481][ T5306] usb 10-1: USB disconnect, device number 15
[ 1414.573290][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.573442][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.573538][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.573632][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.573737][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.573827][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.573915][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.574019][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.574108][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.574256][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.574347][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.574438][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.574536][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.574642][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.574749][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.574859][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.574983][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.575091][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.575196][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.575301][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.575411][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.575522][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.575639][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.575753][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.575868][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.575994][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.576110][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.576225][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.576341][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.576453][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.576571][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.576686][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.576802][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.576914][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.577035][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.577146][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1414.915568][ T5306] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1414.916472][ T5306] ftdi_sio 10-1:0.0: device disconnected
[ 1415.462532][   T37] audit: type=1326 audit(2000112254.270:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.0.14269" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f825acdc819 code=0x0
[ 1415.589543][T17970] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1415.713607][ T5306] usb 6-1: USB disconnect, device number 64
[ 1415.748854][T17970] usb 10-1: Using ep0 maxpacket: 32
[ 1415.775938][T17970] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[ 1415.775972][T17970] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1415.775995][T17970] usb 10-1: Product: syz
[ 1415.776011][T17970] usb 10-1: Manufacturer: syz
[ 1415.776027][T17970] usb 10-1: SerialNumber: syz
[ 1415.827909][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880693cc400: rx timeout, send abort
[ 1415.900721][T17970] usb 10-1: config 0 descriptor??
[ 1416.327985][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880693cc400: abort rx timeout. Force session deactivation
[ 1416.401408][T17970] airspy 10-1:0.0: Board ID: 00
[ 1416.401432][T17970] airspy 10-1:0.0: Firmware version: 
[ 1416.894808][ T7131] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1416.998980][T17970] airspy 10-1:0.0: usb_control_msg() failed -71 request 12
[ 1417.029191][T17970] airspy 10-1:0.0: Registered as swradio24
[ 1417.029218][T17970] airspy 10-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[ 1417.050688][T17970] usb 10-1: USB disconnect, device number 16
[ 1418.255994][ T7163] syzkaller1: entered promiscuous mode
[ 1418.256024][ T7163] syzkaller1: entered allmulticast mode
[ 1419.028301][ T5906] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 1419.191089][ T5906] usb 6-1: Using ep0 maxpacket: 32
[ 1419.206050][ T5906] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[ 1419.206080][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1419.206367][ T5906] usb 6-1: Product: syz
[ 1419.206385][ T5906] usb 6-1: Manufacturer: syz
[ 1419.206399][ T5906] usb 6-1: SerialNumber: syz
[ 1419.251874][ T5906] usb 6-1: config 0 descriptor??
[ 1419.687480][ T5906] airspy 6-1:0.0: Board ID: 00
[ 1419.687960][ T5906] airspy 6-1:0.0: Firmware version: 
[ 1420.049163][T29826] Bluetooth: hci6: command 0x1003 tx timeout
[ 1420.052687][ T4314] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1420.292562][ T5906] airspy 6-1:0.0: usb_control_msg() failed -71 request 12
[ 1420.363690][ T5906] airspy 6-1:0.0: Registered as swradio24
[ 1420.363715][ T5906] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[ 1420.385493][ T5906] usb 6-1: USB disconnect, device number 65
[ 1421.208020][   T37] audit: type=1326 audit(2000112260.010:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.0.14306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825acdc819 code=0x7ffc0000
[ 1421.232662][   T37] audit: type=1326 audit(2000112260.010:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.0.14306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825acdc819 code=0x7ffc0000
[ 1421.232728][   T37] audit: type=1326 audit(2000112260.010:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.0.14306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f825acdc819 code=0x7ffc0000
[ 1421.232781][   T37] audit: type=1326 audit(2000112260.010:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.0.14306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825acdc819 code=0x7ffc0000
[ 1421.232837][   T37] audit: type=1326 audit(2000112260.020:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.0.14306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825acdc819 code=0x7ffc0000
[ 1422.268385][ T5306] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 1422.430157][ T5306] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1422.430195][ T5306] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1422.431376][ T5306] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1422.431411][ T5306] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1422.431435][ T5306] usb 10-1: Manufacturer: syz
[ 1422.509464][ T5306] usb 10-1: config 0 descriptor??
[ 1423.209479][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.459100][ T7227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14320'.
[ 1423.547099][ T5306] uclogic 0003:256C:006D.00B6: failed retrieving string descriptor #100: -71
[ 1423.547162][ T5306] uclogic 0003:256C:006D.00B6: failed retrieving pen parameters: -71
[ 1423.547183][ T5306] uclogic 0003:256C:006D.00B6: failed probing pen v1 parameters: -71
[ 1423.547249][ T5306] uclogic 0003:256C:006D.00B6: failed probing parameters: -71
[ 1423.547367][ T5306] uclogic 0003:256C:006D.00B6: probe with driver uclogic failed with error -71
[ 1423.646611][ T5306] usb 10-1: USB disconnect, device number 17
[ 1426.495822][ T7268] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1426.496003][   T10] IPVS: starting estimator thread 0...
[ 1426.621593][ T7272] IPVS: using max 8 ests per chain, 19200 per kthread
[ 1427.926137][ T7294] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1427.995016][ T7170] Set syz1 is full, maxelem 65536 reached
[ 1431.916167][ T5906] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 1432.257885][ T5906] usb 10-1: config 0 has no interfaces?
[ 1432.257927][ T5906] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1432.257955][ T5906] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1432.530443][ T5906] usb 10-1: config 0 descriptor??
[ 1432.832393][ T7350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1432.840331][ T7350] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1433.178337][   T10] usb 10-1: USB disconnect, device number 18
[ 1433.595750][ T7363] netlink: 104 bytes leftover after parsing attributes in process `syz.6.14376'.
[ 1434.006480][ T7378] netlink: 112 bytes leftover after parsing attributes in process `syz.5.14383'.
[ 1434.149201][    C1] vcan0: j1939_tp_rxtimer: 0xffff88803eaed400: rx timeout, send abort
[ 1434.644261][ T7399] netlink: 'syz.0.14393': attribute type 4 has an invalid length.
[ 1434.659303][    C1] vcan0: j1939_tp_rxtimer: 0xffff88803eaed400: abort rx timeout. Force session deactivation
[ 1435.042594][ T5306] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1435.196239][ T5306] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1435.196269][ T5306] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1435.197976][ T5306] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1435.198006][ T5306] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1435.198030][ T5306] usb 10-1: SerialNumber: syz
[ 1435.341149][ T7417] o2cb: This node has not been configured.
[ 1435.341169][ T7417] o2cb: Cluster check failed. Fix errors before retrying.
[ 1435.341404][ T7417] (syz.5.14401,7417,0):user_dlm_register:674 ERROR: status = -22
[ 1435.341426][ T7417] (syz.5.14401,7417,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus"
[ 1435.467860][ T5306] usb 10-1: 0:2 : does not exist
[ 1435.500857][ T4314] Bluetooth: hci1: command 0x0406 tx timeout
[ 1435.709601][ T5306] usb 10-1: USB disconnect, device number 19
[ 1435.770549][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1436.659587][ T7448] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[ 1436.978312][ T4701] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1436.993694][ T1029] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1437.148443][ T4701] usb 6-1: Using ep0 maxpacket: 16
[ 1437.159544][ T4701] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1437.164728][ T4701] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[ 1437.167650][ T4701] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[ 1437.167683][ T4701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1437.167707][ T4701] usb 6-1: Product: syz
[ 1437.167725][ T4701] usb 6-1: Manufacturer: syz
[ 1437.167742][ T4701] usb 6-1: SerialNumber: syz
[ 1437.377561][ T7458] netlink: 'syz.9.14420': attribute type 4 has an invalid length.
[ 1437.476889][ T4701] usb 6-1: Audio class v2/v3 interfaces need an interface association
[ 1437.477319][ T4701] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1437.783509][ T7469] o2cb: This node has not been configured.
[ 1437.783524][ T7469] o2cb: Cluster check failed. Fix errors before retrying.
[ 1437.783563][ T7469] (syz.9.14423,7469,0):user_dlm_register:674 ERROR: status = -22
[ 1437.783588][ T7469] (syz.9.14423,7469,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus"
[ 1438.032121][ T4701] usb 6-1: USB disconnect, device number 66
[ 1438.600660][ T7485] netlink: 260 bytes leftover after parsing attributes in process `syz.5.14431'.
[ 1438.665991][ T7487] netlink: 'syz.6.14432': attribute type 4 has an invalid length.
[ 1440.226821][ T7527] binder: 7526:7527 ioctl c0306201 200000000540 returned -14
[ 1442.704049][ T7105] bond0: (slave syz_tun): Releasing backup interface
[ 1443.766799][ T4314] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1443.865963][ T4314] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1443.876799][ T4314] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1443.878891][ T4314] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1443.880249][ T4314] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1444.088752][ T5906] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 1444.260132][ T5906] usb 10-1: config index 0 descriptor too short (expected 45, got 36)
[ 1444.260194][ T5906] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1444.260215][ T5906] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1444.260231][ T5906] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1444.260262][ T5906] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1444.260279][ T5906] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1444.280628][ T5906] usb 10-1: config 0 descriptor??
[ 1444.760011][ T5906] plantronics 0003:047F:FFFF.00B7: reserved main item tag 0xd
[ 1444.786103][ T5906] plantronics 0003:047F:FFFF.00B7: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1444.921262][   T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1445.014733][ T5306] usb 10-1: USB disconnect, device number 20
[ 1445.744682][   T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1445.972213][ T4314] Bluetooth: hci0: command tx timeout
[ 1446.460623][   T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1447.243979][   T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1448.048249][ T4314] Bluetooth: hci0: command tx timeout
[ 1448.123102][ T5826] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 1448.272049][ T5826] usb 6-1: Using ep0 maxpacket: 16
[ 1448.281569][ T5826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1448.281606][ T5826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1448.281647][ T5826] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[ 1448.281673][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1448.341441][ T5826] usb 6-1: config 0 descriptor??
[ 1448.365455][ T7575] chnl_net:caif_netlink_parms(): no params data found
[ 1449.051566][ T5826] usb 6-1: language id specifier not provided by device, defaulting to English
[ 1449.253256][ T5826] letsketch 0003:6161:4D15.00B8: Device info: 쀱
[ 1449.500711][ T5826] usb 6-1: Max retries (5) exceeded reading string descriptor 201
[ 1449.500787][ T5826] letsketch 0003:6161:4D15.00B8: probe with driver letsketch failed with error -71
[ 1449.537047][ T5826] usb 6-1: USB disconnect, device number 67
[ 1449.718052][   T43] bridge_slave_1: left allmulticast mode
[ 1449.718497][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1449.821497][   T43] bridge_slave_0: left allmulticast mode
[ 1449.821533][   T43] bridge_slave_0: left promiscuous mode
[ 1449.821760][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1449.975258][ T7656] netlink: 176 bytes leftover after parsing attributes in process `syz.9.14497'.
[ 1450.130219][ T4314] Bluetooth: hci0: command tx timeout
[ 1450.650615][   T10] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1450.808290][   T10] usb 10-1: Using ep0 maxpacket: 32
[ 1450.810857][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1450.810893][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1450.810935][   T10] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[ 1450.810962][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1450.848733][ T4314] Bluetooth: hci4: command 0x0406 tx timeout
[ 1450.881446][   T10] usb 10-1: config 0 descriptor??
[ 1451.476144][   T10] koneplus 0003:1E7D:2D51.00B9: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.9-1/input0
[ 1451.881531][   T10] usb 10-1: USB disconnect, device number 21
[ 1452.210307][T29826] Bluetooth: hci0: command tx timeout
[ 1452.797277][   T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1452.874837][ T7694] netlink: 176 bytes leftover after parsing attributes in process `syz.5.14507'.
[ 1452.891884][   T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1452.934449][   T43] bond0 (unregistering): Released all slaves
[ 1453.009260][ T7575] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1453.009442][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1453.009754][ T7575] bridge_slave_0: entered allmulticast mode
[ 1453.039850][ T7575] bridge_slave_0: entered promiscuous mode
[ 1453.063240][ T5486] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1453.065487][ T7575] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1453.065642][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1453.065869][ T7575] bridge_slave_1: entered allmulticast mode
[ 1453.104294][ T7575] bridge_slave_1: entered promiscuous mode
[ 1453.481680][   T43] tipc: Disabling bearer <udp:syz2>
[ 1453.481928][   T43] tipc: Left network mode
[ 1453.492216][ T7575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1453.507064][ T7575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1454.400886][ T7710] input: syz0 as /devices/virtual/input/input110
[ 1454.597813][ T7575] team0: Port device team_slave_0 added
[ 1454.634433][ T7575] team0: Port device team_slave_1 added
[ 1454.949419][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1454.949438][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1454.949469][ T7575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1455.159337][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1455.159356][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1455.159388][ T7575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1455.612040][ T7575] hsr_slave_0: entered promiscuous mode
[ 1455.615068][ T7575] hsr_slave_1: entered promiscuous mode
[ 1455.617675][ T7575] debugfs: 'hsr0' already exists in 'hsr'
[ 1455.617699][ T7575] Cannot create hsr debugfs directory
[ 1455.983160][ T4314] Bluetooth: hci5: command 0x0405 tx timeout
[ 1457.050788][ T7732] pim6reg1: entered promiscuous mode
[ 1457.050817][ T7732] pim6reg1: entered allmulticast mode
[ 1458.005161][ T5486] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1459.406768][ T7765] binder: 7764:7765 ioctl c018620b 200000000000 returned -14
[ 1461.253824][ T5306] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1461.418427][ T5306] usb 10-1: Using ep0 maxpacket: 8
[ 1461.420827][ T5306] usb 10-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1461.420864][ T5306] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1461.420919][ T5306] usb 10-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[ 1461.420946][ T5306] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1461.427209][ T5306] usb 10-1: config 0 descriptor??
[ 1461.572926][   T38] INFO: task syz-executor:4404 blocked for more than 143 seconds.
[ 1461.572926][   T38] INFO: task syz-executor:4404 blocked for more than 143 seconds.
[ 1461.572956][   T38]       Tainted: G             L      syzkaller #0
[ 1461.572970][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1461.572981][   T38] task:syz-executor    state:D stack:22040 pid:4404  tgid:4404  ppid:1      task_flags:0x400140 flags:0x00080002
[ 1461.573055][   T38] Call Trace:
[ 1461.573063][   T38]  <TASK>
[ 1461.573078][   T38]  __schedule+0x169e/0x54f0
[ 1461.573129][   T38]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1461.573165][   T38]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1461.573200][   T38]  ? rt_spin_lock+0x1e0/0x400
[ 1461.573229][   T38]  ? __pfx___schedule+0x10/0x10
[ 1461.573269][   T38]  ? schedule+0x90/0x360
[ 1461.573303][   T38]  schedule+0x164/0x360
[ 1461.573337][   T38]  fuse_chan_wait_aborted+0x15b/0x250
[ 1461.573368][   T38]  ? __pfx_fuse_chan_wait_aborted+0x10/0x10
[ 1461.573394][   T38]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1461.573416][   T38]  ? __pfx_fuse_chan_abort+0x10/0x10
[ 1461.573475][   T38]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1461.573509][   T38]  fuse_conn_destroy+0x1e7/0x3e0
[ 1461.573539][   T38]  ? __pfx_fuse_conn_destroy+0x10/0x10
[ 1461.573558][   T38]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1461.573581][   T38]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1461.573603][   T38]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 1461.573657][   T38]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1461.573698][   T38]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1461.573729][   T38]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1461.573751][   T38]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1461.573775][   T38]  fuse_kill_sb_anon+0x1ef/0x270
[ 1461.573836][   T38]  deactivate_locked_super+0xbc/0x130
[ 1461.573872][   T38]  cleanup_mnt+0x437/0x4d0
[ 1461.573907][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1461.573932][   T38]  task_work_run+0x1d9/0x270
[ 1461.573971][   T38]  ? __pfx_task_work_run+0x10/0x10
[ 1461.574022][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1461.574049][   T38]  exit_to_user_mode_loop+0xed/0x480
[ 1461.574076][   T38]  ? rcu_is_watching+0x15/0xb0
[ 1461.574108][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1461.574126][   T38]  do_syscall_64+0x33e/0xf80
[ 1461.574192][   T38]  ? trace_irq_disable+0x3b/0x140
[ 1461.574221][   T38]  ? clear_bhb_loop+0x40/0x90
[ 1461.574249][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1461.574275][   T38] RIP: 0033:0x7f23a8a5da57
[ 1461.574290][   T38] RSP: 002b:00007fff5ec9a638 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1461.574308][   T38] RAX: 0000000000000000 RBX: 00007f23a8af2048 RCX: 00007f23a8a5da57
[ 1461.574336][   T38] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5ec9a6f0
[ 1461.574353][   T38] RBP: 00007fff5ec9a6f0 R08: 00007fff5ec9b6f0 R09: 00000000ffffffff
[ 1461.574370][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff5ec9b780
[ 1461.574386][   T38] R13: 00007f23a8af2048 R14: 000000000013df78 R15: 00007fff5ec9b7c0
[ 1461.574421][   T38]  </TASK>
[ 1461.574444][   T38] INFO: task syz.3.13539:5140 blocked for more than 143 seconds.
[ 1461.574459][   T38]       Tainted: G             L      syzkaller #0
[ 1461.574469][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1461.574477][   T38] task:syz.3.13539     state:D stack:28904 pid:5140  tgid:5136  ppid:4308   task_flags:0x400140 flags:0x00080002
[ 1461.574558][   T38] Call Trace:
[ 1461.574567][   T38]  <TASK>
[ 1461.574580][   T38]  __schedule+0x169e/0x54f0
[ 1461.574631][   T38]  ? propagate_entity_cfs_rq+0x10a/0xc00
[ 1461.574676][   T38]  ? __pfx___schedule+0x10/0x10
[ 1461.574711][   T38]  ? __rt_mutex_slowlock_locked+0x1e2/0x25c0
[ 1461.574749][   T38]  rt_mutex_schedule+0x76/0xf0
[ 1461.574786][   T38]  ? __rt_mutex_slowlock_locked+0x1e2/0x25c0
[ 1461.574805][   T38]  __rt_mutex_slowlock_locked+0x1f8f/0x25c0
[ 1461.574824][   T38]  ? __lock_acquire+0x146e/0x2cf0
[ 1461.574881][   T38]  ? __rt_mutex_slowlock_locked+0x1e2/0x25c0
[ 1461.574915][   T38]  ? __pfx___rt_mutex_slowlock_locked+0x10/0x10
[ 1461.574955][   T38]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1461.574976][   T38]  ? rcu_is_watching+0x15/0xb0
[ 1461.575027][   T38]  __rwbase_read_lock+0xc3/0x180
[ 1461.575064][   T38]  ? __pfx___rwbase_read_lock+0x10/0x10
[ 1461.575109][   T38]  down_read+0x132/0x200
[ 1461.575143][   T38]  ? __pfx_down_read+0x10/0x10
[ 1461.575170][   T38]  ? super_lock+0xe0/0x3d0
[ 1461.575213][   T38]  super_lock+0x2d6/0x3d0
[ 1461.575248][   T38]  ? __pfx_super_lock+0x10/0x10
[ 1461.575278][   T38]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1461.575305][   T38]  ? rt_spin_unlock+0x14f/0x200
[ 1461.575331][   T38]  ? rt_spin_unlock+0x160/0x200
[ 1461.575362][   T38]  __iterate_supers+0x126/0x250
[ 1461.575395][   T38]  ? __pfx_sync_inodes_one_sb+0x10/0x10
[ 1461.575429][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1461.575454][   T38]  __ia32_sys_sync+0xa0/0x120
[ 1461.575487][   T38]  ? __pfx___ia32_sys_sync+0x10/0x10
[ 1461.575513][   T38]  ? do_syscall_64+0x9d/0xf80
[ 1461.575555][   T38]  do_syscall_64+0x15f/0xf80
[ 1461.575586][   T38]  ? trace_irq_disable+0x3b/0x140
[ 1461.575612][   T38]  ? clear_bhb_loop+0x40/0x90
[ 1461.575641][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1461.575665][   T38] RIP: 0033:0x7effb47ec819
[ 1461.575679][   T38] RSP: 002b:00007effb2a3e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[ 1461.575695][   T38] RAX: ffffffffffffffda RBX: 00007effb4a65fa0 RCX: 00007effb47ec819
[ 1461.575723][   T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1461.575738][   T38] RBP: 00007effb4a65fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1461.575753][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1461.575768][   T38] R13: 00007effb4a66038 R14: 00007effb4a65fa0 R15: 00007ffc32e40b98
[ 1461.575804][   T38]  </TASK>
[ 1461.575849][   T38] 
[ 1461.575849][   T38] Showing all locks held in the system:
[ 1461.575860][   T38] 1 lock held by khungtaskd/38:
[ 1461.575869][   T38]  #0: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1461.575953][   T38] 4 locks held by kworker/u8:2/43:
[ 1461.575966][   T38]  #0: ffff88801aea6138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910
[ 1461.576022][   T38]  #1: ffffc90000b57c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910
[ 1461.576076][   T38]  #2: ffffffff8f7913a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[ 1461.576141][   T38]  #3: ffffffff8f79fcb8 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x18/0xc0
[ 1461.576201][   T38] 3 locks held by kworker/u8:9/1036:
[ 1461.576211][   T38]  #0: ffff88813fe1c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910
[ 1461.576272][   T38]  #1: ffffc90006037c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910
[ 1461.576326][   T38]  #2: ffffffff8f79fcb8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1461.576394][   T38] 2 locks held by getty/5576:
[ 1461.576403][   T38]  #0: ffff888037a650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1461.576474][   T38]  #1: ffffc90003cb62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0
[ 1461.576544][   T38] 2 locks held by kworker/u8:0/12924:
[ 1461.576554][   T38]  #0: ffff88813fe1c938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910
[ 1461.576615][   T38]  #1: ffffc900062d7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910
[ 1461.576679][   T38] 1 lock held by syz-executor/4404:
[ 1461.576692][   T38]  #0: ffff8880726740d0 (&type->s_umount_key#61){++++}-{4:4}, at: deactivate_super+0xa9/0xe0
[ 1461.576747][   T38] 1 lock held by syz.3.13539/5140:
[ 1461.576769][   T38]  #0: ffff8880726740d0 (&type->s_umount_key#61){++++}-{4:4}, at: super_lock+0x2d6/0x3d0
[ 1461.576852][   T38] 5 locks held by kworker/0:7/5306:
[ 1461.576865][   T38]  #0: ffff88801fe8dd38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910
[ 1461.576914][   T38]  #1: ffffc900068c7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910
[ 1461.576971][   T38]  #2: ffff88802b5aa210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60
[ 1461.577033][   T38]  #3: ffff88805a286210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[ 1461.577087][   T38]  #4: ffff8880794fb1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[ 1461.577149][   T38] 9 locks held by syz-executor/7575:
[ 1461.577164][   T38]  #0: ffff888033b0a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1461.577229][   T38]  #1: ffff888061ea3478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1461.577298][   T38]  #2: ffff88802a026698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1461.577371][   T38]  #3: ffffffff8f0049b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1461.577423][   T38]  #4: ffff88805ee41160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870
[ 1461.577480][   T38]  #5: ffff88803ab90310 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
[ 1461.577543][   T38]  #6: ffffffff8f79fcb8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x13a/0x830
[ 1461.577604][   T38]  #7: ffffffff8f884180 ((inetaddr_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90
[ 1461.577663][   T38]  #8: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: atomic_notifier_call_chain+0x26/0x180
[ 1461.577725][   T38] 1 lock held by syz.5.14504/7688:
[ 1461.577738][   T38]  #0: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550
[ 1461.577790][   T38] 2 locks held by syz.6.14513/7716:
[ 1461.577799][   T38]  #0: ffff8880601f8480 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x380d/0x4540
[ 1461.577877][   T38]  #1: ffff8880678051b0 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x1c5/0x12c0
[ 1461.577942][   T38] 2 locks held by syz.6.14539/7805:
[ 1461.577952][   T38]  #0: ffffffff8f80f8c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1461.578011][   T38]  #1: ffffffff8f79fcb8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x8a0
[ 1461.578065][   T38] 2 locks held by syz.6.14539/7807:
[ 1461.578273][   T38]  #0: ffffffff8f80f8c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1461.578384][   T38]  #1: ffffffff8f79fcb8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x8a0
[ 1461.578440][   T38] 6 locks held by modprobe/7802:
[ 1461.578478][   T38]  #0: ffff88805e1f06c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[ 1461.578600][   T38]  #1: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x12b5/0x2950
[ 1461.578740][   T38]  #2: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x201/0x1d10
[ 1461.578840][   T38]  #3: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200
[ 1461.578931][   T38]  #4: ffff888051457418 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[ 1461.579065][   T38]  #5: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1461.579145][   T38] 2 locks held by syz.5.14540/7804:
[ 1461.579180][   T38]  #0: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: packet_sendmsg_spkt+0x221/0x11d0
[ 1461.579263][   T38]  #1: ffff888025836100 (elock-AF_PACKET){+.+.}-{3:3}, at: sock_queue_err_skb+0x3df/0x640
[ 1461.579386][   T38] 2 locks held by cmp/7806:
[ 1461.579414][   T38]  #0: ffff88803645ea88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[ 1461.579509][   T38]  #1: ffff88804ce083b0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_trylock+0x1f/0x70
[ 1461.579610][   T38] 
[ 1461.579617][   T38] =============================================
[ 1461.579617][   T38] 
[ 1461.579643][   T38] NMI backtrace for cpu 1
[ 1461.579697][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1461.579756][   T38] Tainted: [L]=SOFTLOCKUP
[ 1461.579766][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1461.579779][   T38] Call Trace:
[ 1461.579790][   T38]  <TASK>
[ 1461.579808][   T38]  dump_stack_lvl+0xe8/0x150
[ 1461.579892][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[ 1461.579926][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1461.579954][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1461.580047][   T38]  sys_info+0x135/0x170
[ 1461.580097][   T38]  watchdog+0xfd3/0x1030
[ 1461.580145][   T38]  ? watchdog+0x1c9/0x1030
[ 1461.580225][   T38]  kthread+0x388/0x470
[ 1461.580265][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1461.580289][   T38]  ? __pfx_kthread+0x10/0x10
[ 1461.580320][   T38]  ret_from_fork+0x514/0xb70
[ 1461.580396][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1461.580444][   T38]  ? __switch_to+0xc79/0x1410
[ 1461.580481][   T38]  ? __pfx_kthread+0x10/0x10
[ 1461.580513][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1461.580554][   T38]  </TASK>
[ 1461.580583][   T38] Sending NMI from CPU 1 to CPUs 0:
[ 1461.580615][    C0] NMI backtrace for cpu 0
[ 1461.580632][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1461.580658][    C0] Tainted: [L]=SOFTLOCKUP
[ 1461.580665][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1461.580677][    C0] RIP: 0010:lock_is_held_type+0x97/0x150
[ 1461.580705][    C0] Code: eb 48 81 c3 f8 0b 00 00 45 31 ff 49 83 ff 31 73 24 48 89 df 4c 89 f6 e8 f7 01 00 00 85 c0 75 2a 49 ff c7 49 63 85 f0 0b 00 00 <48> 83 c3 28 49 39 c7 7c d8 eb 11 48 c7 c7 f0 58 29 8e 4c 89 fe e8
[ 1461.580722][    C0] RSP: 0018:ffffc90000157610 EFLAGS: 00000002
[ 1461.580738][    C0] RAX: 0000000000000009 RBX: ffff88801ce90c70 RCX: 0000000000000046
[ 1461.580751][    C0] RDX: 0000000000000400 RSI: ffffffff8e3c81c0 RDI: ffff88801ce90c70
[ 1461.580764][    C0] RBP: 00000000ffffffff R08: ffffffff89084eff R09: ffff8880b8638f78
[ 1461.580778][    C0] R10: 0000000000000100 R11: 0000000000000003 R12: 0000000000000246
[ 1461.580790][    C0] R13: ffff88801ce90000 R14: ffffffff8e3c81c0 R15: 0000000000000004
[ 1461.580804][    C0] FS:  0000000000000000(0000) GS:ffff888125a68000(0000) knlGS:0000000000000000
[ 1461.580819][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1461.580832][    C0] CR2: 00007fe09c592286 CR3: 0000000060d2c000 CR4: 00000000003526f0
[ 1461.580848][    C0] Call Trace:
[ 1461.580855][    C0]  <TASK>
[ 1461.580864][    C0]  __might_resched+0x37/0x480
[ 1461.580888][    C0]  rt_spin_lock+0xc2/0x400
[ 1461.580908][    C0]  ? __pfx_rt_spin_lock+0x10/0x10
[ 1461.580926][    C0]  ? rt_spin_lock+0x1e0/0x400
[ 1461.580945][    C0]  ? __local_bh_disable_ip+0x3c/0x420
[ 1461.580967][    C0]  napi_skb_cache_get+0xbf/0x410
[ 1461.580995][    C0]  ? __alloc_skb+0x186/0x7d0
[ 1461.581021][    C0]  __alloc_skb+0x19a/0x7d0
[ 1461.581051][    C0]  skb_copy+0x188/0x800
[ 1461.581070][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1461.581094][    C0]  ? seqcount_lockdep_reader_access+0xea/0x100
[ 1461.581120][    C0]  mac80211_hwsim_tx_frame_no_nl+0xe82/0x1650
[ 1461.581156][    C0]  ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10
[ 1461.581186][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1461.581212][    C0]  ? mac80211_hwsim_monitor_rx+0x1a3/0x820
[ 1461.581240][    C0]  mac80211_hwsim_tx_frame+0x1b5/0x200
[ 1461.581279][    C0]  mac80211_hwsim_beacon_tx+0x3e8/0x870
[ 1461.581310][    C0]  __iterate_interfaces+0x2ab/0x590
[ 1461.581333][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 1461.581361][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[ 1461.581385][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 1461.581413][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[ 1461.581439][    C0]  mac80211_hwsim_beacon+0xbb/0x180
[ 1461.581460][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1461.581483][    C0]  __hrtimer_run_queues+0x405/0xb10
[ 1461.581521][    C0]  hrtimer_run_softirq+0x18f/0x260
[ 1461.581542][    C0]  handle_softirqs+0x1de/0x6d0
[ 1461.581564][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[ 1461.581584][    C0]  run_ktimerd+0x69/0x100
[ 1461.581605][    C0]  smpboot_thread_fn+0x541/0xa50
[ 1461.581626][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[ 1461.581651][    C0]  kthread+0x388/0x470
[ 1461.581673][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1461.581694][    C0]  ? __pfx_kthread+0x10/0x10
[ 1461.581717][    C0]  ret_from_fork+0x514/0xb70
[ 1461.581737][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1461.581756][    C0]  ? __switch_to+0xc79/0x1410
[ 1461.581783][    C0]  ? __pfx_kthread+0x10/0x10
[ 1461.581806][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1461.581836][    C0]  </TASK>
[ 1461.585678][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[ 1461.585744][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1461.585785][   T38] Tainted: [L]=SOFTLOCKUP
[ 1461.585794][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1461.585809][   T38] Call Trace:
[ 1461.585827][   T38]  <TASK>
[ 1461.585851][   T38]  vpanic+0x56c/0xa60
[ 1461.585933][   T38]  ? __pfx___schedule+0x10/0x10
[ 1461.585965][   T38]  ? __pfx_vpanic+0x10/0x10
[ 1461.586048][   T38]  panic+0xc5/0xd0
[ 1461.586106][   T38]  ? __pfx_panic+0x10/0x10
[ 1461.586137][   T38]  ? preempt_schedule_thunk+0x16/0x30
[ 1461.586231][   T38]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1461.586273][   T38]  watchdog+0x102c/0x1030
[ 1461.586308][   T38]  ? watchdog+0x1c9/0x1030
[ 1461.586390][   T38]  kthread+0x388/0x470
[ 1461.586442][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1461.586467][   T38]  ? __pfx_kthread+0x10/0x10
[ 1461.586535][   T38]  ret_from_fork+0x514/0xb70
[ 1461.586598][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1461.586625][   T38]  ? __switch_to+0xc79/0x1410
[ 1461.586693][   T38]  ? __pfx_kthread+0x10/0x10
[ 1461.586774][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1461.586835][   T38]  </TASK>
[ 1461.587460][   T38] Kernel Offset: disabled