last executing test programs:

15.663602903s ago: executing program 4 (id=438):
r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0], 0x1)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
sendmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "f124a6bed4aee874c28a9af8168ebbbd090ffdef352b1d82f25c7719aa569b4e29f1b1c3200d701547228df8a88f6532e74900000000000200"}, 0x48}, 0x2}, 0x0)
sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="24be649f255eab1ea63917eb4b3c825dbb007404869cd13280cf44895e34e7f475336607729c5f114724c5e27c7643034d5812d0022d8f2fd7b64834a156d79b2c2b7db18da9", 0x46}], 0x1, &(0x7f00000004c0)}}], 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

13.653264864s ago: executing program 4 (id=443):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000700)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

13.255453335s ago: executing program 3 (id=444):
r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0], 0x1)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
sendmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "f124a6bed4aee874c28a9af8168ebbbd090ffdef352b1d82f25c7719aa569b4e29f1b1c3200d701547228df8a88f6532e74900000000000200"}, 0x48}, 0x2}, 0x0)
sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="24be649f255eab1ea63917eb4b3c825dbb007404869cd13280cf44895e34e7f475336607729c5f114724c5e27c7643034d5812d0022d8f2fd7b64834a156d79b2c2b7db18da9c7d3917b61fd", 0x4c}], 0x1}}], 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

12.721196421s ago: executing program 3 (id=445):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9b000/0x2000)=nil})
r3 = dup(r2)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="449fa00908c01f0894adebc3816a1b4970f0779780c263bb97186b6b1301e73c23aaa78e97ca5fa6ff021a3bf1c3fd08d604e470da872a48fdfc225965a9bb39f7db7fab9000d49a57c0efc3910875213403c32873b8840b315068a0819380ee2a91506a05e07606edc2c1b6bfe9fad30e8ad721c9df73eb8c4a2dd07a99d2947392a5ac7b74a497aefdf5f6090c2da417ed248ede20de39170c44e95ac1a499ea331590eaf1d0a1388a8085805069a0b275", 0xb2}], 0x1, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040))
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000280))
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x0, "c09839df"}, @local=@item_4={0x3, 0x2, 0x0, "b7e31a19"}]}}, 0x0}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x10000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10.30392778s ago: executing program 3 (id=450):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00')
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x6, 0x56544943, 0x0, @stepwise={0x3f, 0x5185, 0x0, 0x1, 0x0, 0x800}})
lseek(r0, 0xd7, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000023c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x3c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x2f}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0xf}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000140)={&(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x6, 0x400})

8.608987178s ago: executing program 3 (id=451):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000200)={0x40, 0x15, 0x4, 'a@ro'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x0, 0xd, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000a00)={0x0, 0x0, 0x4, "1b2ee791"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000840)={0x20, 0xc, 0x4, "f4950fe2"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x10, &(0x7f0000000140)={0x20, 0x0, 0x4, "bd823f9d"}, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000740)={0x40, 0x8, 0x4d, "1497910b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x18, &(0x7f0000000500)={0x40, 0x10, 0x4, "e8ba7de6"}, 0x0, 0x0, 0x0, 0x0})

8.606996003s ago: executing program 4 (id=452):
ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f0000000000)={"9f7fa394f8942ece59229f716249a22e4ef21907db554c8b7417cc8e52fd", 0x8, 0x1, 0x401, 0x43, 0x5, 0x4, 0x3, 0x856283c510b536cc, [0x6, 0x4, 0x6, 0xb, 0x800, 0x4, 0xc, 0x4, 0x6, 0x9, 0x3, 0x5, 0xfffffffa, 0x80000000, 0xb, 0x200, 0x3, 0x101, 0xc]})
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0xeb89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = signalfd4(r0, &(0x7f0000000000)={[0x7, 0xd]}, 0x8, 0x1000)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000340)=0x1, 0x4)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000240)=0xc)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "63b6bcef"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x9}]}}, 0x0}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(0x0, r1)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000001240)={0x20, r4, 0xe16, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x24}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000804)
r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r5, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x0, 0xefbcb663})

8.045056263s ago: executing program 1 (id=454):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x800000010001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(0xffffffffffffffff, 0x0, 0xde, 0x0, 0x0, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24)
write$binfmt_aout(r1, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000002c0))
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x3b4}, 0x1, 0x0, 0x0, 0x4e8c4}, 0xa0090)
recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x13)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
socket$rds(0x15, 0x5, 0x0)

7.846857262s ago: executing program 0 (id=455):
r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_vhci(0x0, 0x22)
syz_emit_vhci(&(0x7f00000006c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x200d}}}, 0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)={0x20, 0x15, 0xa, 0x903, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wg0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000240)="3f030e00030000002b001e0089e9aa", 0xf, 0x0, &(0x7f0000000040)={0x11, 0x0, r5, 0x4, 0x0, 0x6, @multicast}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000004f000000662b00000000000016000000000900009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23)
write$P9_RWSTAT(r2, 0x0, 0x0)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, 0x0)

7.499275324s ago: executing program 1 (id=456):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x4)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
writev(r3, &(0x7f0000000340)=[{&(0x7f0000000440)='K', 0x1}], 0x1)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004d80), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10)

7.064456259s ago: executing program 1 (id=457):
semget(0x0, 0x0, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0xfc, 0x4)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0xd2, &(0x7f00000003c0), 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})

6.739588345s ago: executing program 0 (id=458):
r0 = msgget$private(0x0, 0x442)
msgsnd(r0, &(0x7f00000013c0)={0x1, "3fb8c95d77e6b936625fecc2db581dc0eb8ada77543e4e91fee4b13abee14b684147a56f08a22165df40a5edd18847c8aa714e00d336fce553d5a76d9caf29accefeb6112e3d07121fe26371a93390e9580b2ced4ebece7fab7ffc00a6ca587602119dc872fedc16de39caba03bc7c1d65c167fd9945aa6dda5f311e10934d1957c5bcab451ff5"}, 0x8f, 0x800)
msgrcv(r0, &(0x7f0000001480)={0x0, ""/30}, 0x26, 0x4cfab3f176228cef, 0x1000)
msgsnd(r0, &(0x7f00000014c0)={0x2, "50950750c9f18f7087747164684a4f2162bbddd310de56b747f81b1f"}, 0x24, 0x0)
msgrcv(r0, &(0x7f0000001500)={0x0, ""/4096}, 0x1008, 0x2, 0x800)
msgrcv(r0, &(0x7f0000002540)={0x0, ""/22}, 0x1e, 0x2, 0x800)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000002580)=""/106)
msgrcv(r0, &(0x7f0000002600)={0x0, ""/219}, 0xe3, 0x2, 0x0)
msgrcv(r0, &(0x7f0000002700)={0x0, ""/206}, 0xd6, 0x3, 0x800)
msgsnd(r0, &(0x7f0000003540)=ANY=[@ANYBLOB="01000000000000002da3371ba76f3c2a54b860d50711f61a12e5b6107abc4a61bd2b7e279dd2e968e1f8dd78deda3d16e27b9c40667c6d630e327852e2aa4073be6fab01d173db0ad659eaa862f0832be28ae2e18c4c348cec94a0516ae936a896b349a2d87b47502430aaf6d4d8116c63c646efec08fbb00c3581e1afa044fcdcace06d853dec9f5ead5cebe42fc14429d6c37a41e7c2ce12eda38d7e77a9e2011be01aa67ac48b720545ca0aa0e8ae901e3c9ba8faff5e5fc4f4e054382f0d02f768bbc53cf10dac7363590a794c672a8a1be2c81dcd3375e928c77fafa604bd218015927210393a7699faaa6bda2da61cfd9c"], 0xe8, 0x800)
msgsnd(r0, &(0x7f0000003200)=ANY=[@ANYBLOB="020000000000000040140a4bb7a312505375ad5b3916c30d4f08a9aadf09cacd5f09bb6d36e8d95878a9291eeb2d0be91a3e7c62d6466eff4130c576846f7db556a6ea405d3e750da28a8b808e281af86b354b4aba23ddf79e0668b17c5d9dc62f5cf1d6128e2c32cfa4892ec2030d80c4ac9ae4f700000000006f759bf8784a9fd4992931b05e19529dc8b3685cd8e3b57e3c0bca3dde3ba8038ff46d0e219c7247ca3673f1b35b4bb63cdbba5f23bcf37d498f28157d3b6de5a74dd493d5034277853086ef99037d6488c765430e3ffd9af6aad4a12497ea25fda3d3fff19ca8"], 0x84, 0x800)
msgsnd(r0, &(0x7f0000003440)=ANY=[@ANYBLOB="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"], 0x92, 0x0)
msgrcv(r0, &(0x7f0000002ac0)={0x0, ""/159}, 0xa7, 0x1, 0x0)
msgsnd(r0, &(0x7f0000002b80)=ANY=[@ANYBLOB="0300000000000000b7082caec8f29604289233c90515f7b4cea2dd58f1abed3c6cfc2ad7c2ed9243d5434b100000005e61198320ec3ed62cec56508943aa9020f25bc29101f41a6c9814291015c49c9bcda1b6af379464be265dbf3aeed494481a87d3740eaa6e3f6bd5eeef5f69e6482e43d08cbe1ee91b6c2e4c1722f4c34efbca5d73a04efa341dd0e42c50f0c7396d7c824ae559db00"/163], 0xa3, 0x0)
msgrcv(r0, &(0x7f0000002c40)={0x0, ""/254}, 0x106, 0x0, 0x1000)
msgrcv(r0, &(0x7f0000002d80), 0x8, 0x3, 0x800)
msgrcv(r0, &(0x7f0000002940), 0xa6, 0x0, 0x1000)
msgsnd(r0, &(0x7f0000002e80)={0x3, "0f96dab6743e335f116d34b67db3369694ba063b735cb219aa47264a113a937759bc8a733c21a431565a3c856cc2d23e4ea83be34e2cb24f30ca92b02de07b566f0f586bbf77925a07700e5ec63ca31873b7d164c966adb9faf11d6980bb1b7aa958df5c15a7967f6ec8c00c6666617c04c2c76a9edcd9716886236627274e30dfc930009a0a7117e317e5729ab0cb033111d4d9cb3142e87c1c92388ad15c05d49a3fe296b65125a391d5dedd3ae3112b982e2a61bed40907488107d0c54826bdd217bc691058384aea9b1be0724cc989bc9ca9f28f6f3dc1be624433c1"}, 0xe6, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/144}, 0x98, 0x3, 0x800)

6.3167838s ago: executing program 4 (id=459):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000580)=@newsa={0x104, 0x10, 0x1, 0x4, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 0x4e24, 0x0, 0x2, 0x0, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x4d3, 0x3c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x70bd29, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000841}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x10000, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0xb)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)

5.863343021s ago: executing program 0 (id=460):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f000003d000/0x2000)=nil})
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0)

5.427540291s ago: executing program 0 (id=461):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x880)
splice(r0, 0x0, r2, 0x0, 0x9aa7, 0x0)
sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x4, 0x9, 0x2, 0x11, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x5, 0x16, 0x4}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0x6ace, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x8}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x16, 0x8, 0x1a, 0x0, 0x40000001}]}, 0x88}}, 0x40000)
ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f00000000c0)={0x50, 0x0, r4, {0x7, 0x27}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x1, 0x3, 0x0, 0x0, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0})
statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x10200, 0x0, 0x0, 0x1000, &(0x7f000011a000/0x1000)=nil})
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1)
utime(&(0x7f00000000c0)='./file0\x00', 0x0)

3.790727288s ago: executing program 4 (id=462):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
dup(r1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000067c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
syz_clone3(&(0x7f0000000580)={0x200000400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58)

3.781788597s ago: executing program 1 (id=463):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TCSETSW2(r0, 0x5408, 0x0)
r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f00000029c0)={[&(0x7f00000028c0)='\x06', &(0x7f0000002900)='(\x00', &(0x7f0000002940)='\x00', &(0x7f0000002980)='\x00']}, &(0x7f0000002840)={[&(0x7f0000002780)='/dev/snd/seq\x00', &(0x7f0000002800)=')\x00']}, 0x800)
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0)
r3 = dup(0xffffffffffffffff)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendfile(r5, r3, 0x0, 0xd3ba287d)
close(r2)
execveat$binfmt(r3, r1, 0x0, &(0x7f0000000140), 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000640)={0x81, 0x10, '\x00', 0x1, &(0x7f0000000200)=[0x0, 0x0]})
r6 = openat$binfmt(0xffffffffffffff9c, r1, 0x2, 0x0)
write(r6, &(0x7f0000000180)="01010101", 0x4)
close(r6)
renameat(r3, &(0x7f00000005c0)='./file0\x00', r3, &(0x7f00000027c0)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000002b80)={[&(0x7f0000002b40)='!&!.j!\x00']}, &(0x7f0000000600)={[&(0x7f0000000000)='/\x00', &(0x7f00000003c0)='\\}M\xd3)\x00', &(0x7f0000000400)='kW\x03&\x9b\x00\x00\x00', &(0x7f0000000440)=')\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='+)--&]/.#\xd9@(.).,\x00', &(0x7f0000000540)='&\x00', &(0x7f0000000680)='!Izo\xb4E\xb3p\xbe\xe8A<\x8d\\\x99\xdb\xa9N\xdb\x1e\xc1\xac\n\x83\x88\xc8\xac\x1e+j)\xfb\xdc\xc0\fl9\x1fN\xaf\xbc*\xbe${\xb6.8M\x85\'\x8f\xd0\x1e\x93H\xfd:b6\xe2\xcb\xc5\xfba\xab\x838\xe6A\r\xaaK\x16d]\xe0\x1bQh\x92\xadcTO r+\xb0\x01\x05\xa3\xd83\xb4}\xa1-`r\xf2\xa1\x8c\x81\xc8jb\x14\xe9\xfb\xd1L\b\x134\xce\xaf\x05\x1c\xb3\xfb\xabS\r\x13\xbc9p\xf7\xdd\x84U\xd6\xff4\xd5\x12\x0e\xfa\x8f\bUX0\xbf\x9dOK\xe3']}, 0x0)

3.59046996s ago: executing program 0 (id=464):
mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8000})
r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040))
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000000100c0"])
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan0\x00', <r8=>0x0})
r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x22b7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0cc5605, &(0x7f00000000c0)={0x0, @pix={0x0, 0x0, 0x32315659}})
ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0cc5605, &(0x7f00000001c0)={0x1, @pix_mp={0x400000, 0x9af457, 0x384c4150, 0x8, 0xb, [{0x8, 0x2}, {0x2, 0x9}, {0x10000, 0x4f}, {0x2000000, 0x4}, {0x5, 0x5}, {0x55b, 0x5}, {0xc52, 0x7}, {0x40, 0x401}], 0xf8, 0x9, 0x1, 0x0, 0x1}})
openat$vcs(0xffffff9c, &(0x7f0000000340), 0x2000, 0x0)
sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0)
r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r10, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
keyctl$read(0xb, r0, &(0x7f0000000480)=""/164, 0xa4)

3.551448067s ago: executing program 2 (id=441):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045002, &(0x7f0000000400))
read$dsp(r0, &(0x7f0000001500)=""/4096, 0x1000)
read$dsp(r0, &(0x7f00000000c0)=""/96, 0x60)
socket$unix(0x1, 0x0, 0x0)
unshare(0x0)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x4008031, 0xffffffffffffffff, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000280), &(0x7f00000002c0)=0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0)
r2 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040), 0x4)
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20)
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x13)

3.493467561s ago: executing program 3 (id=465):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
syz_io_uring_setup(0x202ddd, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140))
r1 = syz_io_uring_setup(0x4f1f, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xc4424b61c9f5fc7}})
io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0)
r4 = openat$fb0(0xffffff9c, &(0x7f0000000280), 0x10000, 0x0)
mmap$fb(&(0x7f0000299000/0x3000)=nil, 0x3000, 0xc, 0x10, r4, 0xb0000)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000500)={0xa, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000000), 0x8)
sendto$inet6(r6, &(0x7f0000000100)="ee", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0}, 0x1c)
listen(r6, 0x100101)
accept4(r6, 0x0, 0x0, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000180), 0x4)

3.471732224s ago: executing program 1 (id=466):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000001140)=ANY=[], 0x0, 0x0})

3.403331591s ago: executing program 4 (id=467):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace(0x8, r0)
syz_pidfd_open(r0, 0x0)
r1 = syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_setup(0x746d, &(0x7f00000003c0), &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000240))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x12, &(0x7f0000000040)=0x10001, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25)
syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5)
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x48, r6, 0x69b33e74ef0ed939, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000100)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r7, 0x1}, 0x14}}, 0x0)

2.993141706s ago: executing program 0 (id=469):
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000200))
syz_emit_ethernet(0xa3, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={0x0}, 0x18)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000050000f58f04"])
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4d911489d5fbe5cc8106f000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800)
ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000380)={'\v\x00', 0x0, 0x5, 0x2, 0x2, 0x0, "f759e10000001000000000fc6300", '\x00\x00\a\x00', "0300", '$\x00\t\x00', ["95d0aba81013bafb7d000900", "c2fed6bf04cb0f67c3000040", "000000ff0000000000000020", "0000000000000000000100"]})
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000004400)={0x0, 0x4c, &(0x7f00000043c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000002a0001000000000000000000060000000c000a"], 0x20}}, 0x0)

1.308315698s ago: executing program 2 (id=471):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="050100000000000069113e000000000043797acc6d1d0f9bb585100000020000008500000005000092a7a9cd36230f1d29a3fc3f6b43b01b1fbd3f1840"], &(0x7f0000000580)='GPL\x00', 0x5, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0xa, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000003010103000000000000000002000000180001801400018008000100ac1414aa08000200ac1414aa0c0019800800010086090000edb234e85f0bac83b39f61dc0292442b77477de122a11f46b4dc4bcda439da3307f68618"], 0x38}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00', r2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000c40)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r1, @ANYRESHEX=r3, @ANYBLOB="1a412d3ff2838733fe289b041eee1ea393a1c2a4e8615b49442d8e2549f5154b567aaf5160636e9dd9d77570f7615e8c25df5c9f21433d30b2ccac36e1a7b6c0d8f8f9fbab336768e3e0830189fb31f1b0e85a1a8dfd958df175b05d3dbc21f4fcf9813283383c98ed66a58fbb320258a05562a657f436aa1b8c9658144a90a6dc5f17c17f04fc181fa515e7ff72e2cba68dd70364b0a5ac24a3f57ddb7d295e19b54aa98245666e426e275962b33369697a5714e616902c721b55338e13340c2551b4130a4d24b65cf15c90b882", @ANYRES64=0x0], 0x0, 0x0, 0xfffffffffffffe25, 0x0, 0x0, 0x2, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
syz_emit_ethernet(0xb9, &(0x7f0000000680)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @generic={{0x25, 0x4, 0x3, 0x4, 0xab, 0x68, 0x0, 0x4, 0x89, 0x0, @private=0xa010101, @remote, {[@generic={0x83, 0x6, "ee26f36e"}, @cipso={0x86, 0x3a, 0x2, [{0x5, 0x6, "2a35f070"}, {0x2, 0x6, "9677ce26"}, {0x7, 0x5, "98ffa5"}, {0x0, 0x9, "18f38fe4d10dc7"}, {0xce1a6956d426b87d, 0xe, "8533cdaadc032bf9c4a92a6c"}, {0x2, 0xc, "edfde7eb2dd3b85dec55"}]}, @timestamp_prespec={0x44, 0x3c, 0xb6, 0x3, 0x3, [{@rand_addr=0x64010101, 0x3}, {@loopback, 0xea}, {@rand_addr=0x64010101, 0x40000}, {@local}, {@local, 0x8}, {@broadcast, 0x80}, {@loopback, 0x1}]}, @end, @noop]}}, "d19f75d1274417a79690eaa02c926a3dec06fbe9306497"}}}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x20040000)
sendto$inet6(r3, &(0x7f0000000000)=',', 0x1, 0x0, &(0x7f0000000640)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)

1.009837819s ago: executing program 2 (id=472):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={<r5=>0x0, 0x401, 0x30}, &(0x7f0000000180)=0xc)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xe07}}}, 0x84)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x4000000)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}}, 0x0)

654.520159ms ago: executing program 2 (id=473):
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x4c040)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x19, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2})
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = dup(r3)
write$UHID_DESTROY(r4, &(0x7f0000000180), 0xffffff70)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xa9, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8}, @IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x30}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'bridge0\x00'})

235.506357ms ago: executing program 2 (id=474):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r8)

122.673556ms ago: executing program 1 (id=475):
syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
syz_open_dev$vim2m(&(0x7f0000000080), 0x7fff, 0x2)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
eventfd2(0x5, 0x80000)
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb905000000010902"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
dup(r0)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2], 0x20)

121.674617ms ago: executing program 3 (id=476):
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xd7)
capset(0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf7}})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00eb00", @ANYRES16=0x0, @ANYBLOB="000000000000000000000b000000080003", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00')
socket$netlink(0x10, 0x3, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r2, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private2}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000380)={0x101, 0x2, 0x8008, 0x6, 0x7fff, 0x8, 0x2, 0x8}, &(0x7f0000000400)=0x20)
open_tree(0xffffffffffffff9c, 0x0, 0x0)
shutdown(r1, 0x4384bb523088dcc8)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, 0x0)
syz_emit_ethernet(0x1545, &(0x7f0000002d00)=ANY=[@ANYBLOB="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"], 0x0)

0s ago: executing program 2 (id=477):
syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439)
r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b)
io_setup(0x7, &(0x7f0000000280)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x82a, r1, 0x0, 0x64, 0x8}])
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0)
dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x12, @void, @value}, 0x90)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r6, 0x4004743a, &(0x7f0000000300))
ioctl$PPPIOCDISCONN(r6, 0x7439)

kernel console output (not intermixed with test programs):

) entered blocking state
[  172.344092][ T2895] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.354502][ T6686] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  172.366110][ T6686] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  172.400713][ T2895] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.408013][ T2895] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.432738][ T6686] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  172.468450][ T6365] usb 2-1: Using ep0 maxpacket: 8
[  172.480715][ T6365] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76
[  172.490882][ T6365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.512190][ T6365] usb 2-1: Product: syz
[  172.525790][ T6365] usb 2-1: Manufacturer: syz
[  172.539930][ T6365] usb 2-1: SerialNumber: syz
[  172.562183][ T6365] usb 2-1: config 0 descriptor??
[  172.582109][ T6365] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[  172.679676][ T6677] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.791733][ T6686] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.881130][ T6686] 8021q: adding VLAN 0 to HW filter on device team0
[  172.928850][ T2895] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.936093][ T2895] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.956078][ T6677] veth0_vlan: entered promiscuous mode
[  172.984879][ T2895] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.992172][ T2895] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.055547][ T6677] veth1_vlan: entered promiscuous mode
[  173.057598][ T6365] gspca_m5602: Failed to find a sensor
[  173.081197][ T5286] usb 4-1: USB disconnect, device number 10
[  173.121437][ T6365] ALi m5602 2-1:0.0: ALi m5602 webcam failed
[  173.161292][ T6365] usb 2-1: USB disconnect, device number 8
[  173.265694][ T6677] veth0_macvtap: entered promiscuous mode
[  173.297914][ T6677] veth1_macvtap: entered promiscuous mode
[  173.383018][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.412097][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.432222][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.443237][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.456569][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.480491][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.497815][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.509497][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.522034][ T6677] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.542738][ T6686] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.558387][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.574951][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.599709][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.619739][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.648045][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.659768][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.670110][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.687483][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.713255][ T6677] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.747185][ T5240] Bluetooth: hci1: command tx timeout
[  173.763511][ T6677] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.796959][ T6677] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.805731][ T6677] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.846847][ T6677] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.002213][ T6686] veth0_vlan: entered promiscuous mode
[  174.043398][ T6686] veth1_vlan: entered promiscuous mode
[  174.068630][ T2550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.088568][ T6365] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  174.104024][ T2550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.177128][ T1305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.184248][ T6686] veth0_macvtap: entered promiscuous mode
[  174.193347][ T1305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.216825][ T5240] Bluetooth: hci3: command tx timeout
[  174.225573][ T6686] veth1_macvtap: entered promiscuous mode
[  174.258936][ T6365] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  174.271711][ T6365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.292557][ T6365] usb 2-1: config 0 descriptor??
[  174.302498][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.313390][ T6365] pwc: Samsung MPC-C10 USB webcam detected.
[  174.343501][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.378266][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.403023][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.429971][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.451444][ T6814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.244'.
[  174.461079][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.474704][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.496568][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.512909][ T6365] pwc: send_video_command error -71
[  174.517569][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.529187][ T6365] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  174.536578][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.549756][ T6365] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  174.568475][ T6814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.244'.
[  174.603971][ T6365] usb 2-1: USB disconnect, device number 9
[  174.611709][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.642236][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.676834][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.704052][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.727711][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.742437][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.767564][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.796742][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.825140][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.859185][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.870949][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.889672][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.915334][ T6686] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.939958][ T6686] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.966742][ T6686] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.975630][ T6686] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.097135][ T6365] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  175.189101][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.217305][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.288738][ T6365] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  175.299824][ T6365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.311452][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.333930][ T6365] usb 2-1: config 0 descriptor??
[  175.338423][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.370510][ T6365] pwc: Samsung MPC-C10 USB webcam detected.
[  175.397548][ T5289] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  175.567220][ T5289] usb 4-1: Using ep0 maxpacket: 8
[  175.588784][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.613696][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.646920][ T5289] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[  175.671593][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.707775][ T6845] input: syz1 as /devices/virtual/input/input18
[  175.736216][ T5289] usb 4-1: config 0 descriptor??
[  175.775051][ T6365] pwc: recv_control_msg error -32 req 02 val 2b00
[  175.791296][ T6845] netlink: 24 bytes leftover after parsing attributes in process `syz.4.247'.
[  175.797196][ T6365] pwc: recv_control_msg error -32 req 02 val 2700
[  175.829435][ T6365] pwc: recv_control_msg error -32 req 04 val 1700
[  175.839408][ T6365] pwc: recv_control_msg error -32 req 02 val 2c00
[  175.856196][ T6365] pwc: recv_control_msg error -32 req 04 val 1000
[  176.037084][ T6372] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  176.085381][   T29] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.087786][ T6365] pwc: recv_control_msg error -32 req 04 val 1400
[  176.121877][ T6365] pwc: recv_control_msg error -32 req 02 val 2000
[  176.148359][ T6365] pwc: recv_control_msg error -32 req 02 val 2100
[  176.198814][ T6853] IPv6: Can't replace route, no match found
[  176.245981][ T6372] usb 3-1: config 0 has no interfaces?
[  176.258733][ T6372] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  176.313624][ T6372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.342387][   T29] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.367956][ T6365] pwc: recv_control_msg error -71 req 06 val 0600
[  176.373244][ T6372] usb 3-1: config 0 descriptor??
[  176.401357][ T6365] pwc: recv_control_msg error -71 req 04 val 1500
[  176.412253][ T5289] kye 0003:0458:0153.0007: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.3-1/input0
[  176.456416][ T6365] pwc: recv_control_msg error -71 req 02 val 2500
[  176.477349][ T6365] pwc: recv_control_msg error -71 req 02 val 2400
[  176.505793][ T6365] pwc: recv_control_msg error -71 req 02 val 2600
[  176.519074][ T6365] pwc: recv_control_msg error -71 req 02 val 2900
[  176.545093][ T6365] pwc: recv_control_msg error -71 req 02 val 2800
[  176.576989][ T6365] pwc: recv_control_msg error -71 req 04 val 1100
[  176.590551][   T29] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.603151][ T6365] pwc: recv_control_msg error -71 req 04 val 1200
[  176.638663][ T5289] usb 4-1: USB disconnect, device number 11
[  176.651845][ T6365] pwc: Registered as video71.
[  176.685017][ T6365] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19
[  176.763969][ T6365] usb 2-1: USB disconnect, device number 10
[  176.960420][   T29] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.010510][ T6372] usb 3-1: USB disconnect, device number 14
[  177.185956][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  177.195860][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  177.205330][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  177.215627][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  177.224485][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  177.232339][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  177.351070][   T29] bridge_slave_1: left allmulticast mode
[  177.386790][   T29] bridge_slave_1: left promiscuous mode
[  177.394366][   T29] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.421750][   T29] bridge_slave_0: left allmulticast mode
[  177.429927][   T29] bridge_slave_0: left promiscuous mode
[  177.438942][   T29] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.587389][ T6368] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  177.808013][ T6368] usb 5-1: Using ep0 maxpacket: 16
[  177.824587][ T6368] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f
[  177.838536][ T6368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.860582][ T6368] usb 5-1: Product: syz
[  177.864947][ T6368] usb 5-1: Manufacturer: syz
[  177.870248][ T6368] usb 5-1: SerialNumber: syz
[  177.900005][ T6368] usb 5-1: config 0 descriptor??
[  177.920765][ T6368] kobil_sct 5-1:0.0: required endpoints missing
[  178.136218][ T6898] netlink: 'syz.2.268': attribute type 7 has an invalid length.
[  178.143694][ T6368] usb 5-1: USB disconnect, device number 5
[  178.182182][   T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.198367][   T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.213097][   T29] bond0 (unregistering): Released all slaves
[  178.239063][ T6897] netlink: 144 bytes leftover after parsing attributes in process `syz.2.268'.
[  178.930186][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.274'.
[  179.094447][   T29] hsr_slave_0: left promiscuous mode
[  179.100832][ T6359] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  179.141118][   T29] hsr_slave_1: left promiscuous mode
[  179.166555][   T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.187481][   T29] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.203065][   T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.217479][   T29] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.266797][ T6359] usb 4-1: Using ep0 maxpacket: 16
[  179.277174][ T6359] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  179.312292][ T6359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.338939][ T5244] Bluetooth: hci2: command tx timeout
[  179.350902][ T6359] usb 4-1: Product: syz
[  179.365559][ T6359] usb 4-1: Manufacturer: syz
[  179.370557][ T6359] usb 4-1: SerialNumber: syz
[  179.382999][ T6359] r8152-cfgselector 4-1: Unknown version 0x0000
[  179.390711][ T6359] r8152-cfgselector 4-1: config 0 descriptor??
[  179.397201][   T29] veth1_macvtap: left promiscuous mode
[  179.397274][   T29] veth0_macvtap: left promiscuous mode
[  179.397420][   T29] veth1_vlan: left promiscuous mode
[  179.448105][   T29] veth0_vlan: left promiscuous mode
[  179.893084][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  179.904086][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  179.912864][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  179.921749][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  179.930309][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  179.938987][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  179.947618][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  179.956325][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  179.964967][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  179.985688][ T6918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.996729][ T5289] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  180.027790][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  180.145658][ T6918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.221825][ T5289] usb 2-1: config 0 has no interfaces?
[  180.295629][ T5289] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  180.369203][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.419155][ T5289] usb 2-1: config 0 descriptor??
[  180.854294][ T7013] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  180.883595][   T29] team0 (unregistering): Port device team_slave_1 removed
[  180.955850][   T29] team0 (unregistering): Port device team_slave_0 removed
[  181.423597][ T5244] Bluetooth: hci2: command tx timeout
[  181.868759][ T6888] chnl_net:caif_netlink_parms(): no params data found
[  181.883350][ T6365] r8152-cfgselector 4-1: USB disconnect, device number 12
[  182.223993][ T6359] usb 2-1: USB disconnect, device number 11
[  182.326914][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.335965][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.337081][ T6372] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  182.346913][ T6888] bridge_slave_0: entered allmulticast mode
[  182.418996][ T6888] bridge_slave_0: entered promiscuous mode
[  182.428734][ T6365] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  182.448837][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.456051][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.477021][ T6888] bridge_slave_1: entered allmulticast mode
[  182.488234][ T6888] bridge_slave_1: entered promiscuous mode
[  182.516800][ T6372] usb 5-1: Using ep0 maxpacket: 16
[  182.529845][ T6372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.556389][ T6372] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  182.574550][ T6888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.594343][ T6372] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  182.610063][ T6888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.613421][ T6372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.652046][ T6365] usb 4-1: config 0 has no interfaces?
[  182.659675][ T6372] usb 5-1: config 0 descriptor??
[  182.659955][ T6365] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  182.715017][ T6365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.747164][ T6365] usb 4-1: config 0 descriptor??
[  182.768422][ T6888] team0: Port device team_slave_0 added
[  182.804893][ T6888] team0: Port device team_slave_1 added
[  182.965248][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.996821][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.066240][ T6888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.105898][ T6372] microsoft 0003:045E:07DA.0008: No inputs registered, leaving
[  183.117017][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.128116][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.146953][ T6372] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  183.202359][ T6372] microsoft 0003:045E:07DA.0008: no inputs found
[  183.227247][ T6372] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway
[  183.266699][ T6888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.428119][ T7053] batman_adv: batadv0: Adding interface: dummy0
[  183.437119][ T7053] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.472121][ T6372] usb 4-1: USB disconnect, device number 13
[  183.497460][ T5244] Bluetooth: hci2: command tx timeout
[  183.503632][ T7053] batman_adv: batadv0: Interface activated: dummy0
[  183.531722][ T7056] batadv0: mtu less than device minimum
[  183.559082][ T7056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  183.571499][ T7056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  183.584224][ T7056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  183.596284][ T7056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  183.608971][ T7056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  183.621696][ T7056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  183.634181][ T7056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  183.646205][ T7056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  183.658818][ T7056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  183.708032][ T6365] usb 5-1: USB disconnect, device number 6
[  183.761692][ T6888] hsr_slave_0: entered promiscuous mode
[  183.788165][ T6888] hsr_slave_1: entered promiscuous mode
[  184.557949][ T7087] binder: 7086:7087 ioctl c0189374 20000040 returned -22
[  185.580930][ T5244] Bluetooth: hci2: command tx timeout
[  185.783655][ T6888] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  185.794621][ T6888] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  185.839946][ T6888] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  185.876753][ T6365] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  185.890480][ T6888] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  186.022663][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'.
[  186.043888][ T6365] usb 4-1: Using ep0 maxpacket: 32
[  186.056008][ T6365] usb 4-1: config 0 has no interfaces?
[  186.064981][ T6365] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  186.094952][ T6365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.138084][ T6365] usb 4-1: config 0 descriptor??
[  186.355637][ T6888] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.431751][ T6888] 8021q: adding VLAN 0 to HW filter on device team0
[  186.474111][ T6988] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.481362][ T6988] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.522005][ T6988] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.529244][ T6988] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.565224][   T30] audit: type=1326 audit(1727965202.253:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.1.300" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x0
[  186.647412][ T6359] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  186.715023][ T6888] 8021q: adding VLAN 0 to HW filter on device batadv0
[  186.813594][ T6359] usb 3-1: Using ep0 maxpacket: 16
[  186.848710][ T6359] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  186.857994][ T6888] veth0_vlan: entered promiscuous mode
[  186.882524][ T6359] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  186.884942][ T6888] veth1_vlan: entered promiscuous mode
[  186.906207][ T6359] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  186.924474][ T7136] Zero length message leads to an empty skb
[  186.931962][ T6359] usb 3-1: New USB device found, idVendor=1b80, idProduct=c161, bcdDevice=ce.43
[  186.952436][ T6359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.968847][ T6359] usb 3-1: Product: syz
[  186.984105][ T6359] usb 3-1: Manufacturer: syz
[  186.991059][ T6359] usb 3-1: SerialNumber: syz
[  186.999084][ T6359] usb 3-1: config 0 descriptor??
[  187.023724][ T6888] veth0_macvtap: entered promiscuous mode
[  187.048745][ T6888] veth1_macvtap: entered promiscuous mode
[  187.093173][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.104829][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.121673][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.142967][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.164106][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.187280][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.197434][ T6366] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[  187.215663][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.226440][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.269269][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.319608][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.355454][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.372165][ T7144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.385477][ T6366] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  187.411127][ T6366] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  187.436845][ T6366] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  187.440716][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.466313][ T6366] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  187.482783][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.502592][ T6366] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  187.513095][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.526989][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.535866][ T6368] usb 4-1: USB disconnect, device number 14
[  187.538553][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.550474][ T6366] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  187.563545][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.572494][ T6366] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  187.600649][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.606684][ T6366] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  187.625690][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.647700][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.651252][ T6366] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  187.662994][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.691033][ T6366] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  187.718050][ T6366] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  187.718506][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.732701][ T6366] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  187.744430][ T7144] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.816149][ T6366] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  187.817780][ T6888] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.862088][ T6366] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  187.873983][ T6888] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.887688][ T6359] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  187.894364][ T6366] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  187.897724][ T6366] usb 5-1: string descriptor 0 read error: -22
[  187.914907][ T6359] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  187.922122][ T6888] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.943499][ T6366] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  187.946072][ T6359] usb 3-1: USB disconnect, device number 15
[  187.964770][ T6888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.978194][ T6366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.058326][ T6366] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  188.209658][ T2550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.235670][ T2550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.296151][ T6994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.305480][ T6994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.433018][ T6359] usb 5-1: USB disconnect, device number 7
[  188.546876][   T30] audit: type=1804 audit(1727965204.233:8): pid=7174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.262" name="/newroot/0/file0" dev="fuse" ino=1 res=1 errno=0
[  188.757259][ T7179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'.
[  189.077632][ T6359] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  189.128701][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'.
[  189.166032][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0
[  189.181588][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.220304][ T7189] dummy0: entered promiscuous mode
[  189.244672][ T7189] dummy0: left promiscuous mode
[  189.257185][ T6359] usb 2-1: Using ep0 maxpacket: 8
[  189.272872][ T6359] usb 2-1: unable to get BOS descriptor set
[  189.293366][ T6359] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60
[  189.305588][ T6359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.315713][ T6359] usb 2-1: Product: syz
[  189.325799][ T6359] usb 2-1: Manufacturer: syz
[  189.330758][ T6359] usb 2-1: SerialNumber: syz
[  189.352653][ T6359] r8152-cfgselector 2-1: Unknown version 0x0000
[  189.369333][ T6359] r8152-cfgselector 2-1: config 0 descriptor??
[  189.517043][ T6365] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  189.631761][ T6359] r8152-cfgselector 2-1: Unknown version 0x0000
[  189.639247][ T6359] r8152-cfgselector 2-1: bad CDC descriptors
[  189.668035][ T6359] r8152-cfgselector 2-1: USB disconnect, device number 12
[  189.699358][ T6365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.723214][ T6365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.733805][ T6365] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  189.743397][ T6365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.761565][ T6365] usb 4-1: config 0 descriptor??
[  189.847130][ T6372] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  189.947129][ T6357] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  190.011519][ T6372] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  190.035439][ T6372] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  190.053868][ T6372] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  190.064993][ T6372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.083977][ T7199] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  190.105180][ T6372] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  190.105859][ T6365] usbhid 4-1:0.0: can't add hid device: -71
[  190.125517][ T6365] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  190.146449][ T6357] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  190.156054][ T6365] usb 4-1: USB disconnect, device number 15
[  190.157117][ T6357] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  190.175855][ T6357] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  190.185054][ T6357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.234592][ T6357] usb 3-1: config 0 descriptor??
[  190.253266][ T6357] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  190.459185][ T6372] usb 5-1: USB disconnect, device number 8
[  190.666537][ T6365] usb 3-1: USB disconnect, device number 16
[  190.756763][ T6357] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  190.917218][ T6357] usb 2-1: config 0 has no interfaces?
[  190.922818][ T6357] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  190.943638][ T6357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.968230][ T6357] usb 2-1: config 0 descriptor??
[  191.640422][ T6368] usb 2-1: USB disconnect, device number 13
[  191.724624][ T7218] net_ratelimit: 10 callbacks suppressed
[  191.724642][ T7218] dccp_close: ABORT with 292 bytes unread
[  192.039228][ T2550] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.175876][ T2550] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.386548][ T2550] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.517369][ T7226] binder: 7225:7226 ioctl c0306201 20000680 returned -14
[  192.541075][ T2550] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.606789][ T6357] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  192.777482][ T6357] usb 4-1: Using ep0 maxpacket: 16
[  192.788511][ T6357] usb 4-1: config 0 has an invalid interface number: 159 but max is 1
[  192.798540][ T6357] usb 4-1: config 0 has an invalid interface number: 249 but max is 1
[  192.844724][ T6357] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 2
[  192.864863][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  192.879786][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  192.883966][ T6357] usb 4-1: config 0 has no interface number 0
[  192.894936][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  192.907365][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  192.913561][ T6357] usb 4-1: config 0 has no interface number 2
[  192.922985][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  192.931380][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  192.998715][ T6357] usb 4-1: config 0 interface 159 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  193.031211][ T2550] bridge_slave_1: left allmulticast mode
[  193.040338][ T6357] usb 4-1: config 0 interface 159 altsetting 8 endpoint 0x7 has invalid wMaxPacketSize 0
[  193.056144][ T2550] bridge_slave_1: left promiscuous mode
[  193.074364][ T7230] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  193.077208][ T6357] usb 4-1: config 0 interface 159 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 7
[  193.084132][ T2550] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.129366][ T6357] usb 4-1: too many endpoints for config 0 interface 1 altsetting 1: 99, using maximum allowed: 30
[  193.146232][ T7230] kvm: pic: non byte read
[  193.158681][ T7230] kvm: pic: level sensitive irq not supported
[  193.158831][ T7230] kvm: pic: non byte read
[  193.165140][ T6357] usb 4-1: config 0 interface 1 altsetting 1 has an endpoint descriptor with address 0x1A, changing to 0xA
[  193.165224][ T6357] usb 4-1: config 0 interface 1 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 7
[  193.165274][ T6357] usb 4-1: config 0 interface 1 altsetting 1 has a duplicate endpoint with address 0xA, skipping
[  193.165341][ T6357] usb 4-1: config 0 interface 1 altsetting 1 endpoint 0xD has invalid maxpacket 512, setting to 64
[  193.165401][ T6357] usb 4-1: config 0 interface 1 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 99
[  193.178139][ T7230] kvm: pic: level sensitive irq not supported
[  193.222613][ T6357] usb 4-1: config 0 interface 249 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  193.250488][ T2550] bridge_slave_0: left allmulticast mode
[  193.259000][ T2550] bridge_slave_0: left promiscuous mode
[  193.265212][ T7230] kvm: pic: non byte read
[  193.270147][ T2550] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.283439][ T6357] usb 4-1: config 0 interface 249 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  193.302496][ T6357] usb 4-1: config 0 interface 249 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  193.314292][ T7230] kvm: pic: level sensitive irq not supported
[  193.314620][ T7230] kvm: pic: non byte read
[  193.316500][ T6357] usb 4-1: config 0 interface 249 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  193.337588][ T6357] usb 4-1: config 0 interface 159 has no altsetting 0
[  193.344451][ T6357] usb 4-1: config 0 interface 1 has no altsetting 0
[  193.351411][ T6357] usb 4-1: config 0 interface 249 has no altsetting 0
[  193.353435][ T7230] kvm: pic: level sensitive irq not supported
[  193.365804][ T6357] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9
[  193.374983][ T7230] kvm: pic: non byte read
[  193.381723][ T6357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.415242][ T6357] usb 4-1: SerialNumber: syz
[  193.420409][ T7230] kvm: pic: level sensitive irq not supported
[  193.420493][ T7230] kvm: pic: non byte read
[  193.432998][ T6357] usb 4-1: config 0 descriptor??
[  193.931959][ T7251] netlink: 36 bytes leftover after parsing attributes in process `syz.1.329'.
[  193.979835][ T7251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.329'.
[  194.024623][ T7251] netlink: 36 bytes leftover after parsing attributes in process `syz.1.329'.
[  194.056245][ T7251] netlink: 36 bytes leftover after parsing attributes in process `syz.1.329'.
[  194.383532][ T6357] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware
[  194.525747][ T6357] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  194.550468][ T6357] dib0700: firmware download failed at 7 with -22
[  194.557773][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  194.564509][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  194.567099][ T6357] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware
[  194.584543][ T6357] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  194.593017][ T6357] dib0700: firmware download failed at 7 with -22
[  194.613385][ T6357] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware
[  194.636815][ T6357] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  194.644916][ T6357] dib0700: firmware download failed at 7 with -22
[  194.703243][ T6357] usb 4-1: USB disconnect, device number 16
[  194.952234][ T2550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  194.980200][ T2550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.004269][ T2550] bond0 (unregistering): Released all slaves
[  195.013763][ T7262] syz.1.331 uses obsolete (PF_INET,SOCK_PACKET)
[  195.020697][ T5244] Bluetooth: hci2: command tx timeout
[  195.287186][ T5296] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  195.465975][ T7267] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  195.543056][ T7267] kvm: pic: non byte read
[  195.557582][ T7267] kvm: pic: level sensitive irq not supported
[  195.557738][ T7267] kvm: pic: non byte read
[  196.015084][ T2550] hsr_slave_0: left promiscuous mode
[  196.076205][ T2550] hsr_slave_1: left promiscuous mode
[  196.099345][ T2550] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.121820][ T2550] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.168334][ T2550] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.206452][ T2550] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.251157][ T2550] veth1_macvtap: left promiscuous mode
[  196.258104][ T2550] veth0_macvtap: left promiscuous mode
[  196.264620][ T2550] veth1_vlan: left promiscuous mode
[  196.273634][ T2550] veth0_vlan: left promiscuous mode
[  196.402111][ T5300] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  196.576753][ T5300] usb 5-1: Using ep0 maxpacket: 16
[  196.590582][ T5300] usb 5-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06
[  196.600037][ T5296] usb 3-1: device descriptor read/64, error -71
[  196.620004][ T5300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.637499][ T5300] usb 5-1: Product: syz
[  196.642841][ T5300] usb 5-1: Manufacturer: syz
[  196.663783][ T5300] usb 5-1: SerialNumber: syz
[  196.684465][ T5300] usb 5-1: config 0 descriptor??
[  196.804915][ T6048] udevd[6048]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  196.857057][ T5296] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  197.028540][ T5296] usb 3-1: config 0 has no interfaces?
[  197.036553][ T5296] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  197.056222][ T5296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.078700][ T5296] usb 3-1: config 0 descriptor??
[  197.097965][ T5244] Bluetooth: hci2: command tx timeout
[  197.270591][ T2550] team0 (unregistering): Port device team_slave_1 removed
[  197.365008][ T2550] team0 (unregistering): Port device team_slave_0 removed
[  197.564486][ T5296] usb 3-1: USB disconnect, device number 18
[  198.024344][ T7289] bond0: entered promiscuous mode
[  198.041623][ T7289] bond_slave_0: entered promiscuous mode
[  198.058530][ T7289] bond_slave_1: entered promiscuous mode
[  198.102030][ T7289] team0: entered promiscuous mode
[  198.120416][ T7289] team_slave_0: entered promiscuous mode
[  198.126301][ T7289] team_slave_1: entered promiscuous mode
[  198.162684][ T6372] usb 5-1: USB disconnect, device number 9
[  198.272487][ T7298] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  198.299657][ T7234] chnl_net:caif_netlink_parms(): no params data found
[  198.758990][ T7234] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.792103][ T7234] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.829197][ T7234] bridge_slave_0: entered allmulticast mode
[  198.847055][ T7234] bridge_slave_0: entered promiscuous mode
[  198.886840][ T7234] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.904295][ T7234] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.920919][ T7234] bridge_slave_1: entered allmulticast mode
[  198.949113][ T7234] bridge_slave_1: entered promiscuous mode
[  199.084372][ T7234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.149526][ T7234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.179980][ T5244] Bluetooth: hci2: command tx timeout
[  199.378455][ T7234] team0: Port device team_slave_0 added
[  199.428664][ T7234] team0: Port device team_slave_1 added
[  199.498696][ T7234] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.521922][ T7234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.605403][ T7234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.631696][ T7234] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.663010][ T7234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.690207][ T7234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.811296][ T7234] hsr_slave_0: entered promiscuous mode
[  199.826875][ T6372] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  199.844390][ T7234] hsr_slave_1: entered promiscuous mode
[  199.987588][ T6372] usb 3-1: Using ep0 maxpacket: 32
[  200.019504][ T6372] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  200.031838][ T7365] openvswitch: netlink: Unknown key attributes 2
[  200.046897][ T6372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.068771][ T6372] usb 3-1: config 0 descriptor??
[  200.093194][ T6372] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  200.373807][ T6368] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  200.419689][ T6368] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  200.483180][ T7381] capability: warning: `syz.1.353' uses deprecated v2 capabilities in a way that may be insecure
[  200.619341][ T6366] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  200.813662][ T6366] usb 5-1: unable to get BOS descriptor or descriptor too short
[  200.834567][ T6366] usb 5-1: no configurations
[  200.856041][ T6366] usb 5-1: can't read configurations, error -22
[  200.880070][ T6357] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  200.978583][ T7234] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  200.995552][ T7234] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  201.005679][ T7234] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  201.030662][ T7234] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  201.079122][ T6357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.118651][ T6357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.140336][ T6357] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  201.161569][ T6357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.177555][ T6357] usb 2-1: config 0 descriptor??
[  201.257021][ T5244] Bluetooth: hci2: command tx timeout
[  201.264714][ T7234] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.291856][ T7234] 8021q: adding VLAN 0 to HW filter on device team0
[  201.319792][ T6998] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.327047][ T6998] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.345178][ T6998] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.352412][ T6998] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.403431][ T7384] bridge0: entered promiscuous mode
[  201.417218][ T7384] vlan2: entered promiscuous mode
[  201.422537][ T7384] vlan2: entered allmulticast mode
[  201.464993][ T7384] bridge0: entered allmulticast mode
[  201.480437][ T7384] bridge0: left allmulticast mode
[  201.496010][ T7384] bridge0: left promiscuous mode
[  201.662414][ T6357] usbhid 2-1:0.0: can't add hid device: -71
[  201.688427][ T6357] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  201.732334][ T6357] usb 2-1: USB disconnect, device number 14
[  201.791204][ T7234] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.948958][ T7234] veth0_vlan: entered promiscuous mode
[  202.271963][ T6998] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.372945][ T7234] veth1_vlan: entered promiscuous mode
[  202.553615][ T6998] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.575422][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'.
[  202.788144][ T6998] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.949455][ T6998] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.977253][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  202.989826][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  202.999936][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  203.011496][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  203.024354][ T7234] veth0_macvtap: entered promiscuous mode
[  203.030703][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  203.040050][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  203.050833][ T7234] veth1_macvtap: entered promiscuous mode
[  203.079612][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.093396][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.108269][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.122790][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.133299][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.147112][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.172281][ T6372] gspca_vc032x: reg_r err -71
[  203.180115][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.191026][ T6372] gspca_vc032x: I2c Bus Busy Wait 00
[  203.196378][ T6372] gspca_vc032x: I2c Bus Busy Wait 00
[  203.209233][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.220868][ T6372] gspca_vc032x: I2c Bus Busy Wait 00
[  203.226218][ T6372] gspca_vc032x: I2c Bus Busy Wait 00
[  203.232220][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.242840][ T6372] gspca_vc032x: I2c Bus Busy Wait 00
[  203.248809][ T6372] gspca_vc032x: I2c Bus Busy Wait 00
[  203.254161][ T6372] gspca_vc032x: I2c Bus Busy Wait 00
[  203.260089][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.270522][ T6372] gspca_vc032x: I2c Bus Busy Wait 00
[  203.275947][ T6372] gspca_vc032x: I2c Bus Busy Wait 00
[  203.285153][ T7234] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.292978][ T6372] gspca_vc032x: I2c Bus Busy Wait 00
[  203.302576][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.314999][ T6372] gspca_vc032x: I2c Bus Busy Wait 00
[  203.324496][ T6372] gspca_vc032x: I2c Bus Busy Wait 00
[  203.330319][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.340397][ T6372] gspca_vc032x: I2c Bus Busy Wait 00
[  203.345740][ T6372] gspca_vc032x: I2c Bus Busy Wait 00
[  203.352039][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.362649][ T6372] gspca_vc032x: I2c Bus Busy Wait 00
[  203.368664][ T6372] gspca_vc032x: I2c Bus Busy Wait 00
[  203.374006][ T6372] gspca_vc032x: I2c Bus Busy Wait 00
[  203.379921][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.391382][ T6372] gspca_vc032x: Unknown sensor...
[  203.397197][ T6372] vc032x 3-1:0.0: probe with driver vc032x failed with error -22
[  203.405081][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.461350][ T6372] usb 3-1: USB disconnect, device number 19
[  203.471852][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.495352][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.518276][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.540023][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.558218][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.580958][ T7234] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.604683][ T7234] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.626218][ T7234] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.644962][ T7234] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.656308][ T7234] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.705602][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'.
[  204.043591][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'.
[  204.100702][ T7457] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.150221][ T6998] bridge_slave_1: left allmulticast mode
[  204.170304][ T6998] bridge_slave_1: left promiscuous mode
[  204.182362][ T6998] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.214750][ T6998] bridge_slave_0: left allmulticast mode
[  204.231093][ T6998] bridge_slave_0: left promiscuous mode
[  204.257648][ T6998] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.178806][ T5244] Bluetooth: hci4: command tx timeout
[  205.412799][ T6998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  205.429951][ T6998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  205.441758][ T6998] bond0 (unregistering): Released all slaves
[  205.467666][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'.
[  205.479400][ T6996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.508204][ T6996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.546729][ T6366] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  205.709151][ T6366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.728712][ T6366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.743298][ T6366] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  205.772995][ T6366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.806229][ T6366] usb 3-1: config 0 descriptor??
[  205.896201][ T6994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.925324][ T6994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.087852][ T6372] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  206.156885][ T6998] hsr_slave_0: left promiscuous mode
[  206.182308][ T6998] hsr_slave_1: left promiscuous mode
[  206.236493][ T6998] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.252312][ T6366] usbhid 3-1:0.0: can't add hid device: -71
[  206.257048][ T6998] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.264999][ T6366] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  206.280923][ T6366] usb 3-1: USB disconnect, device number 20
[  206.294130][ T6372] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  206.310843][ T6998] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.326509][ T6372] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  206.340993][ T6998] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.357377][ T6372] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  206.377256][ T6372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.406885][ T6998] veth1_macvtap: left promiscuous mode
[  206.412598][ T6372] usb 5-1: config 0 descriptor??
[  206.428363][ T6998] veth0_macvtap: left promiscuous mode
[  206.434141][ T6998] veth1_vlan: left promiscuous mode
[  206.443240][ T6372] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  206.457002][ T6998] veth0_vlan: left promiscuous mode
[  206.517063][ T6365] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  206.680418][ T6365] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.702551][ T6365] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  206.738328][ T6365] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.750806][ T6365] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  206.766900][ T6365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.819376][ T6365] hub 1-1:1.0: bad descriptor, ignoring hub
[  206.825445][ T6365] hub 1-1:1.0: probe with driver hub failed with error -5
[  206.877872][ T6365] cdc_wdm 1-1:1.0: skipping garbage
[  206.883169][ T6365] cdc_wdm 1-1:1.0: skipping garbage
[  206.894734][ T6366] usb 5-1: USB disconnect, device number 12
[  206.920148][ T6365] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  207.082643][ T7508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.098040][ T7508] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.256911][ T5244] Bluetooth: hci4: command tx timeout
[  207.542696][ T7535] input: syz1 as /devices/virtual/input/input21
[  207.629228][ T7538] netlink: 24 bytes leftover after parsing attributes in process `syz.4.374'.
[  207.715206][ T6998] team0 (unregistering): Port device team_slave_1 removed
[  207.776544][ T6998] team0 (unregistering): Port device team_slave_0 removed
[  207.866885][ T6366] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  208.026955][ T6366] usb 3-1: Using ep0 maxpacket: 32
[  208.035233][ T6366] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  208.044925][ T6366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.065322][ T6366] usb 3-1: config 0 descriptor??
[  208.079621][ T6366] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  208.385329][ T7431] chnl_net:caif_netlink_parms(): no params data found
[  208.534243][ T5298] usb 1-1: USB disconnect, device number 6
[  208.661120][ T7431] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.668818][ T7431] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.677650][ T7431] bridge_slave_0: entered allmulticast mode
[  208.690711][ T7431] bridge_slave_0: entered promiscuous mode
[  208.722678][ T7547] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  208.747023][ T7547] macvtap1: entered promiscuous mode
[  208.764352][ T7547] macvtap1: entered allmulticast mode
[  208.794560][ T7547] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  208.837352][ T7547] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  208.847742][ T7547] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  208.916941][ T7431] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.924119][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.958378][ T7431] bridge_slave_1: entered allmulticast mode
[  208.965573][ T7431] bridge_slave_1: entered promiscuous mode
[  209.080706][ T7431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.093502][ T7431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.126963][ T6368] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  209.213200][ T7431] team0: Port device team_slave_0 added
[  209.233209][ T7431] team0: Port device team_slave_1 added
[  209.307789][ T6368] usb 2-1: Using ep0 maxpacket: 8
[  209.321085][ T6368] usb 2-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e
[  209.337420][ T5244] Bluetooth: hci4: command tx timeout
[  209.340749][ T6368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.371469][ T7431] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.378674][ T6368] usb 2-1: Product: syz
[  209.378732][ T6368] usb 2-1: Manufacturer: syz
[  209.378752][ T6368] usb 2-1: SerialNumber: syz
[  209.383560][ T6368] usb 2-1: config 0 descriptor??
[  209.397484][ T7431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.397519][ T7431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.399825][ T7431] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.441788][ T7431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.468541][ T7431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.579530][ T6368] gspca_main: spca500-2.14.0 probing 046d:0900
[  209.699797][ T7431] hsr_slave_0: entered promiscuous mode
[  209.707214][ T7431] hsr_slave_1: entered promiscuous mode
[  209.721380][ T7431] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  209.731493][ T7431] Cannot create hsr debugfs directory
[  209.958824][ T6366] gspca_vc032x: I2c Bus Busy Wait 00
[  210.213718][ T5286] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  210.413592][ T5286] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  210.441947][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.453625][ T5286] usb 1-1: config 0 descriptor??
[  210.495318][ T5286] pwc: Samsung MPC-C10 USB webcam detected.
[  210.718991][ T5286] pwc: send_video_command error -71
[  210.724648][ T5286] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  210.732581][ T5286] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[  210.756254][ T5286] usb 1-1: USB disconnect, device number 7
[  210.774016][ T7431] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  210.821825][ T7431] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  210.865164][ T7431] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  210.898017][ T7431] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  211.115463][ T7431] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.171188][ T6366] gspca_vc032x: reg_w err -71
[  211.176508][ T6366] gspca_vc032x: I2c Bus Busy Wait 00
[  211.182795][ T6366] gspca_vc032x: I2c Bus Busy Wait 00
[  211.188620][ T6366] gspca_vc032x: I2c Bus Busy Wait 00
[  211.194024][ T6366] gspca_vc032x: I2c Bus Busy Wait 00
[  211.201420][ T6366] gspca_vc032x: I2c Bus Busy Wait 00
[  211.208257][ T6366] gspca_vc032x: I2c Bus Busy Wait 00
[  211.213736][ T6366] gspca_vc032x: I2c Bus Busy Wait 00
[  211.216185][ T7431] 8021q: adding VLAN 0 to HW filter on device team0
[  211.219763][ T6366] gspca_vc032x: I2c Bus Busy Wait 00
[  211.231389][ T6366] gspca_vc032x: I2c Bus Busy Wait 00
[  211.236949][ T6366] gspca_vc032x: I2c Bus Busy Wait 00
[  211.242338][ T6366] gspca_vc032x: I2c Bus Busy Wait 00
[  211.247885][ T6366] gspca_vc032x: I2c Bus Busy Wait 00
[  211.253272][ T6366] gspca_vc032x: I2c Bus Busy Wait 00
[  211.258788][ T6366] gspca_vc032x: I2c Bus Busy Wait 00
[  211.264181][ T6366] gspca_vc032x: I2c Bus Busy Wait 00
[  211.269743][ T6366] gspca_vc032x: I2c Bus Busy Wait 00
[  211.275200][ T6366] gspca_vc032x: I2c Bus Busy Wait 00
[  211.280930][ T5286] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  211.288757][ T6366] gspca_vc032x: Unknown sensor...
[  211.293959][ T6366] vc032x 3-1:0.0: probe with driver vc032x failed with error -22
[  211.318905][ T2550] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.326048][ T2550] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.344259][ T6366] usb 3-1: USB disconnect, device number 21
[  211.417048][ T5244] Bluetooth: hci4: command tx timeout
[  211.445260][ T2550] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.452532][ T2550] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.466848][ T5286] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  211.489778][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.577880][ T5286] usb 1-1: config 0 descriptor??
[  211.603029][ T5286] pwc: Samsung MPC-C10 USB webcam detected.
[  211.734920][ T7431] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.859143][ T7431] veth0_vlan: entered promiscuous mode
[  211.880773][ T7613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  211.888129][ T7613] IPv6: NLM_F_CREATE should be set when creating new route
[  211.895458][ T7613] IPv6: NLM_F_CREATE should be set when creating new route
[  211.946446][ T7431] veth1_vlan: entered promiscuous mode
[  212.007633][ T5286] pwc: recv_control_msg error -32 req 02 val 2b00
[  212.031193][ T5286] pwc: recv_control_msg error -32 req 02 val 2700
[  212.045514][ T7616] warning: `syz.2.388' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  212.058910][ T5286] pwc: recv_control_msg error -32 req 04 val 1700
[  212.076904][ T5286] pwc: recv_control_msg error -32 req 02 val 2c00
[  212.100325][ T7431] veth0_macvtap: entered promiscuous mode
[  212.107356][ T5286] pwc: recv_control_msg error -32 req 04 val 1000
[  212.131967][ T5286] pwc: recv_control_msg error -32 req 04 val 1300
[  212.132361][ T7431] veth1_macvtap: entered promiscuous mode
[  212.166315][ T5286] pwc: recv_control_msg error -32 req 04 val 1400
[  212.186169][ T5286] pwc: recv_control_msg error -32 req 02 val 2000
[  212.229254][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.241249][ T5286] pwc: recv_control_msg error -32 req 02 val 2100
[  212.268305][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.277111][ T5286] pwc: recv_control_msg error -32 req 02 val 2200
[  212.303734][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.326758][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.338879][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.352985][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.363213][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.374249][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.400060][ T7431] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.428466][ T7627] debugfs: Directory 'netdev:nicvf0' with parent 'phy45' already present!
[  212.489046][ T5286] pwc: recv_control_msg error -71 req 04 val 1500
[  212.498452][ T5286] pwc: recv_control_msg error -71 req 02 val 2500
[  212.517662][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.518383][ T6368] gspca_spca500: reg write: error -71
[  212.539545][ T5286] pwc: recv_control_msg error -71 req 02 val 2400
[  212.566994][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.578345][ T6368] usb 2-1: USB disconnect, device number 15
[  212.600881][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.677882][ T5286] pwc: recv_control_msg error -71 req 02 val 2600
[  212.678493][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.688033][ T5286] pwc: recv_control_msg error -71 req 02 val 2900
[  212.702727][ T5286] pwc: recv_control_msg error -71 req 02 val 2800
[  212.716855][ T5286] pwc: recv_control_msg error -71 req 04 val 1100
[  212.726882][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.732157][ T5286] pwc: recv_control_msg error -71 req 04 val 1200
[  212.747789][ T5286] pwc: Registered as video71.
[  212.753789][ T5286] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22
[  212.777651][ T5286] usb 1-1: USB disconnect, device number 8
[  212.826705][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.858880][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.869786][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.879957][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.890590][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.902176][ T7431] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.977037][ T7431] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.985832][ T7431] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.995260][ T7431] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.004540][ T7431] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.006754][  T936] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  213.156832][ T6372] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  213.182912][ T6998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.200200][  T936] usb 5-1: Using ep0 maxpacket: 32
[  213.205839][ T6998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.218844][  T936] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  213.228431][  T936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.240309][  T936] usb 5-1: Product: syz
[  213.244770][  T936] usb 5-1: Manufacturer: syz
[  213.261875][  T936] usb 5-1: SerialNumber: syz
[  213.278576][  T936] usb 5-1: config 0 descriptor??
[  213.296482][  T936] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  213.306816][ T6372] usb 3-1: Using ep0 maxpacket: 32
[  213.313833][ T6372] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  213.322541][ T6372] usb 3-1: config 0 has no interface number 0
[  213.332912][ T6372] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  213.333404][ T2550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.347289][ T6372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.353360][ T2550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.380484][ T6372] usb 3-1: Product: syz
[  213.384728][ T6372] usb 3-1: Manufacturer: syz
[  213.406188][ T6372] usb 3-1: SerialNumber: syz
[  213.420810][ T6372] usb 3-1: config 0 descriptor??
[  213.429921][ T6372] smsc95xx v2.0.0
[  213.548657][ T7644] block device autoloading is deprecated and will be removed.
[  213.648746][ T7644] syz.0.393: attempt to access beyond end of device
[  213.648746][ T7644] loop198: rw=2048, sector=0, nr_sectors = 8 limit=0
[  213.875203][ T6372] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  213.887301][ T6372] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  213.956909][ T6357] usb 4-1: new low-speed USB device number 17 using dummy_hcd
[  214.056367][ T7657] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256
[  214.097066][ T5296] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  214.129773][ T6357] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  214.147102][ T6357] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  214.161130][ T6357] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  214.172799][ T6357] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  214.186497][ T6357] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  214.197758][ T6357] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  214.205280][ T6357] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  214.215822][ T6357] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  214.227635][ T6357] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  214.240490][ T6357] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  214.253099][ T6357] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  214.260762][ T5296] usb 2-1: Using ep0 maxpacket: 16
[  214.266051][ T6357] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  214.281665][ T6357] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  214.293363][ T6357] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  214.306894][ T5296] usb 2-1: config 0 has no interfaces?
[  214.312621][ T6357] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  214.509596][ T6357] usb 4-1: string descriptor 0 read error: -22
[  214.516123][ T6357] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  214.537702][ T6357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.555202][ T5296] usb 2-1: string descriptor 0 read error: -71
[  214.566796][ T5296] usb 2-1: New USB device found, idVendor=f76d, idProduct=c71d, bcdDevice= 0.40
[  214.575945][ T5296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.603721][ T6357] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  214.613638][ T5296] usb 2-1: config 0 descriptor??
[  214.630511][ T5296] usb 2-1: can't set config #0, error -71
[  214.641896][ T5296] usb 2-1: USB disconnect, device number 16
[  214.755274][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies.
[  214.785310][ T7659] netlink: 36 bytes leftover after parsing attributes in process `syz.0.399'.
[  214.806569][ T7659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.399'.
[  214.828171][ T7659] netlink: 36 bytes leftover after parsing attributes in process `syz.0.399'.
[  214.844061][ T6366] usb 4-1: USB disconnect, device number 17
[  214.846159][ T7659] netlink: 36 bytes leftover after parsing attributes in process `syz.0.399'.
[  215.175586][ T7663] netlink: 'syz.1.401': attribute type 4 has an invalid length.
[  215.206221][ T7663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.401'.
[  215.222138][ T7663] netlink: 'syz.1.401': attribute type 17 has an invalid length.
[  215.230682][ T6365] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  215.396887][ T6365] usb 1-1: Using ep0 maxpacket: 32
[  215.419224][ T6365] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  215.436715][ T6365] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  215.458321][ T6365] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  215.479391][ T6365] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  215.499769][ T6365] usb 1-1: config 0 interface 0 has no altsetting 0
[  215.516231][ T6365] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  215.528577][ T6365] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  215.538350][ T6365] usb 1-1: Product: syz
[  215.545077][ T6365] usb 1-1: Manufacturer: syz
[  215.550509][ T6365] usb 1-1: SerialNumber: syz
[  215.558838][ T6365] usb 1-1: config 0 descriptor??
[  215.570173][ T6365] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  215.586798][ T5286] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  215.598113][ T6365] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  215.750936][ T5286] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  215.760420][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.772474][ T5286] usb 2-1: config 0 descriptor??
[  216.078925][ T7661] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  216.087035][ T6357] usb 1-1: USB disconnect, device number 9
[  216.092971][    C0] ldusb 1-1:0.0: usb_submit_urb failed (-19)
[  216.130670][ T6357] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  216.138203][ T7670] ldusb: No device or device unplugged -19
[  216.214749][ T5286] usb 2-1: Cannot read MAC address
[  216.235957][ T5286] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  216.260207][ T5286] usb 2-1: USB disconnect, device number 17
[  216.372596][ T6372] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  216.415462][ T6372] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  216.457890][ T6372] usb 3-1: USB disconnect, device number 22
[  216.768763][  T936] gspca_stk1135: reg_w 0x18 err -71
[  216.775138][  T936] gspca_stk1135: serial bus timeout: status=0x00
[  216.785441][ T5286] usb 4-1: new low-speed USB device number 18 using dummy_hcd
[  216.794960][  T936] gspca_stk1135: Sensor write failed
[  216.805535][  T936] gspca_stk1135: serial bus timeout: status=0x00
[  216.813223][  T936] gspca_stk1135: Sensor write failed
[  216.819244][  T936] gspca_stk1135: serial bus timeout: status=0x00
[  216.827266][  T936] gspca_stk1135: Sensor read failed
[  216.837096][  T936] gspca_stk1135: serial bus timeout: status=0x00
[  216.845593][  T936] gspca_stk1135: Sensor read failed
[  216.872390][  T936] gspca_stk1135: Detected sensor type unknown (0x0)
[  216.879778][  T936] gspca_stk1135: serial bus timeout: status=0x00
[  216.886564][  T936] gspca_stk1135: Sensor read failed
[  216.891954][  T936] gspca_stk1135: serial bus timeout: status=0x00
[  216.902199][  T936] gspca_stk1135: Sensor read failed
[  216.907758][  T936] gspca_stk1135: serial bus timeout: status=0x00
[  216.924642][  T936] gspca_stk1135: Sensor write failed
[  216.934859][  T936] gspca_stk1135: serial bus timeout: status=0x00
[  216.970713][  T936] gspca_stk1135: Sensor write failed
[  216.976307][  T936] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71
[  216.987685][ T5286] usb 4-1: No LPM exit latency info found, disabling LPM.
[  217.010798][ T5286] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x1 is Bulk; changing to Interrupt
[  217.023402][  T936] usb 5-1: USB disconnect, device number 13
[  217.029889][ T5286] usb 4-1: config 1 interface 0 has no altsetting 0
[  217.050612][ T5286] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  217.075045][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.085865][ T5286] usb 4-1: Product: ࡠ
[  217.090172][ T5286] usb 4-1: Manufacturer: ᰉ
[  217.108490][ T7677] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  217.126954][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'.
[  217.175760][ T7685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  217.340117][ T6365] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  217.386784][ T6357] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  217.458021][ T5286] usb 4-1: USB disconnect, device number 18
[  217.498621][ T6365] usb 2-1: Using ep0 maxpacket: 32
[  217.505956][ T6365] usb 2-1: config 0 has an invalid interface number: 104 but max is 0
[  217.514463][ T6365] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  217.526043][ T6365] usb 2-1: config 0 has no interface number 0
[  217.534524][ T6365] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=a7.3a
[  217.539585][ T6357] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  217.543827][ T6365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.559571][ T6357] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  217.570527][ T6365] usb 2-1: Product: syz
[  217.570553][ T6365] usb 2-1: Manufacturer: syz
[  217.576151][ T6357] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  217.580566][ T6365] usb 2-1: SerialNumber: syz
[  217.598595][ T6365] usb 2-1: config 0 descriptor??
[  217.609111][ T6357] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.629263][ T6357] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  217.645571][ T6357] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  217.655035][ T6357] usb 3-1: Product: syz
[  217.667551][ T6357] usb 3-1: Manufacturer: syz
[  217.678666][ T6357] cdc_wdm 3-1:1.0: skipping garbage
[  217.688437][ T6357] cdc_wdm 3-1:1.0: skipping garbage
[  217.698933][ T6372] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  217.709447][ T6357] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  217.715491][ T6357] cdc_wdm 3-1:1.0: Unknown control protocol
[  217.807657][ T6365] usb 2-1: unknown interface protocol 0x71, assuming v1
[  217.821741][ T6365] usb 2-1: 104:97 : does not exist
[  217.840998][ T6365] usb 2-1: USB disconnect, device number 18
[  217.857352][ T6372] usb 5-1: Using ep0 maxpacket: 8
[  217.869730][ T6372] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  217.880093][ T6372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.890851][ T6372] usb 5-1: Product: syz
[  217.895145][ T6372] usb 5-1: Manufacturer: syz
[  217.902095][ T6048] udevd[6048]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.104/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  217.909248][   T30] audit: type=1326 audit(1727965233.593:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7680 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7fc00000
[  217.946970][ T6372] usb 5-1: SerialNumber: syz
[  217.962650][ T6372] usb 5-1: config 0 descriptor??
[  217.975586][ T5286] usb 3-1: USB disconnect, device number 23
[  218.213286][ T6372] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  218.376905][  T936] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  218.384837][ T6365] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  218.539038][ T6365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  218.549852][  T936] usb 1-1: config 0 has no interfaces?
[  218.555402][  T936] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  218.571754][ T6365] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  218.589342][  T936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.600139][ T6365] usb 4-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e
[  218.610391][ T6365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.619622][  T936] usb 1-1: config 0 descriptor??
[  218.625143][ T6365] usb 4-1: Product: syz
[  218.630390][ T6365] usb 4-1: Manufacturer: syz
[  218.635139][ T6365] usb 4-1: SerialNumber: syz
[  218.649258][ T6365] usb 4-1: config 0 descriptor??
[  218.660579][ T6365] ti_usb_3410_5052 4-1:0.0: required endpoints missing
[  218.821680][ T7697] io-wq is not configured for unbound workers
[  218.878557][ T7693] bond_slave_0: entered promiscuous mode
[  218.890793][ T7693] bond_slave_1: entered promiscuous mode
[  218.907018][ T7693] macsec1: entered promiscuous mode
[  218.912542][ T7693] bond0: entered promiscuous mode
[  218.920273][ T7693] macsec1: entered allmulticast mode
[  218.925850][ T7693] bond0: entered allmulticast mode
[  218.931433][ T7693] bond_slave_0: entered allmulticast mode
[  218.946056][ T7693] bond_slave_1: entered allmulticast mode
[  218.995182][ T7693] bond0: left allmulticast mode
[  219.004315][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  219.013923][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  219.024657][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  219.036331][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  219.036954][ T7693] bond_slave_0: left allmulticast mode
[  219.053239][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  219.062244][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  219.073539][ T7693] bond_slave_1: left allmulticast mode
[  219.080244][ T7693] bond0: left promiscuous mode
[  219.086023][ T7693] bond_slave_0: left promiscuous mode
[  219.091679][ T7693] bond_slave_1: left promiscuous mode
[  219.291995][ T5300] usb 1-1: USB disconnect, device number 10
[  219.364406][ T6357] usb 4-1: USB disconnect, device number 19
[  219.470278][ T7701] chnl_net:caif_netlink_parms(): no params data found
[  219.573494][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.583401][ T7701] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.597251][ T7701] bridge_slave_0: entered allmulticast mode
[  219.616030][ T7701] bridge_slave_0: entered promiscuous mode
[  219.639515][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.648200][ T7701] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.655504][ T7701] bridge_slave_1: entered allmulticast mode
[  219.664946][ T7701] bridge_slave_1: entered promiscuous mode
[  219.708945][ T7701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  219.726200][ T7701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  219.795950][ T7701] team0: Port device team_slave_0 added
[  219.816276][ T7701] team0: Port device team_slave_1 added
[  219.867924][ T6372] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  219.895924][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.901311][ T6372] usb 5-1: USB disconnect, device number 14
[  219.924218][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.990410][ T7701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  220.026336][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_1
[  220.076912][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.146673][ T7701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  220.344181][ T7701] hsr_slave_0: entered promiscuous mode
[  220.351434][ T7701] hsr_slave_1: entered promiscuous mode
[  220.358112][ T7701] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  220.365925][ T7701] Cannot create hsr debugfs directory
[  220.371939][ T7726] input: syz1 as /devices/virtual/input/input23
[  220.458781][ T7726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.421'.
[  220.885156][ T7701] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.973364][ T7732] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.048475][ T6357] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  221.094965][ T7701] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.176831][ T5240] Bluetooth: hci0: command tx timeout
[  221.213249][ T6357] usb 1-1: Using ep0 maxpacket: 8
[  221.234820][ T6357] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  221.266073][ T7701] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.288848][ T6357] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83
[  221.323309][ T6357] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  221.362043][ T6357] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  221.384813][ T6357] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[  221.401975][ T6357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.412718][ T6357] usb 1-1: Product: syz
[  221.424691][ T6357] usb 1-1: Manufacturer: syz
[  221.433155][ T6357] usb 1-1: SerialNumber: syz
[  221.454061][ T6357] usb 1-1: config 0 descriptor??
[  221.499663][ T7701] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.543963][ T6357] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input24
[  221.809595][ T7738] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  221.816551][ T7738] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  221.887941][ T7738] vhci_hcd vhci_hcd.0: Device attached
[  222.036753][ T6357] rc_core: IR keymap rc-imon-pad not found
[  222.042673][ T6357] Registered IR keymap rc-empty
[  222.075900][ T6357] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  222.089351][ T7701] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  222.108505][ T6357] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  222.110760][ T7701] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  222.138824][ T7701] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  222.168029][ T7701] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  222.186887][ T6372] usb 10-1: SetAddress Request (2) to port 0
[  222.193515][ T6372] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd
[  222.247477][ T7746] vhci_hcd: connection closed
[  222.252396][ T2550] vhci_hcd: stop threads
[  222.280568][ T6357] imon:send_packet: packet tx failed (-71)
[  222.302194][ T2550] vhci_hcd: release socket
[  222.312337][ T6357] imon 1-1:0.0: remote input dev register failed
[  222.334416][ T2550] vhci_hcd: disconnect device
[  222.344755][ T6357] imon 1-1:0.0: imon_init_intf0: rc device setup failed
[  222.497569][ T6357] imon 1-1:0.0: unable to initialize intf0, err 0
[  222.516899][ T6357] imon:imon_probe: failed to initialize context!
[  222.523054][ T7701] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.526558][ T6357] imon 1-1:0.0: unable to register, err -19
[  222.552442][ T6357] usb 1-1: USB disconnect, device number 11
[  222.651533][ T7701] 8021q: adding VLAN 0 to HW filter on device team0
[  222.678777][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.686094][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.748427][ T6992] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.755664][ T6992] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.926913][ T5298] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  222.995625][   T30] audit: type=1326 audit(1727965238.683:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.0.433" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x0
[  223.040097][ T7701] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.091965][ T5298] usb 3-1: config 0 has no interfaces?
[  223.104636][ T5298] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  223.110095][ T7701] veth0_vlan: entered promiscuous mode
[  223.120114][ T5298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.131917][ T5298] usb 3-1: config 0 descriptor??
[  223.152734][ T7701] veth1_vlan: entered promiscuous mode
[  223.204334][ T7701] veth0_macvtap: entered promiscuous mode
[  223.214541][ T7701] veth1_macvtap: entered promiscuous mode
[  223.232728][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.243383][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.254109][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.265028][ T5240] Bluetooth: hci0: command tx timeout
[  223.270982][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.281008][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.294844][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.304948][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.315738][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.327993][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.340495][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.352031][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.362740][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.386799][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.398269][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.409833][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.420286][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.430921][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.441423][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.453250][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.465244][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.475820][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.487216][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.511384][ T7701] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.528602][ T7701] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.555079][ T7701] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.578622][ T7701] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.746067][ T7000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.755255][ T7000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.822001][ T6998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.837303][ T6998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.993271][ T7789] input: syz1 as /devices/virtual/input/input26
[  224.053074][ T7789] netlink: 24 bytes leftover after parsing attributes in process `syz.4.435'.
[  224.196860][ T6357] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  224.229170][ T7793] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  224.244038][ T7793] kvm: pic: non byte write
[  224.249992][ T7793] kvm: pic: non byte write
[  224.297002][  T936] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  224.356790][ T6357] usb 1-1: Using ep0 maxpacket: 16
[  224.371578][ T6357] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  224.397528][ T6357] usb 1-1: config 0 has no interface number 0
[  224.414071][ T6357] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01
[  224.431743][ T6357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.447220][  T936] usb 2-1: Using ep0 maxpacket: 16
[  224.449101][ T6357] usb 1-1: Product: syz
[  224.463385][  T936] usb 2-1: config 0 has an invalid interface number: 159 but max is 1
[  224.475643][ T6357] usb 1-1: Manufacturer: syz
[  224.485991][ T6357] usb 1-1: SerialNumber: syz
[  224.490706][  T936] usb 2-1: config 0 has an invalid interface number: 249 but max is 1
[  224.490739][  T936] usb 2-1: config 0 has 3 interfaces, different from the descriptor's value: 2
[  224.490765][  T936] usb 2-1: config 0 has no interface number 0
[  224.490784][  T936] usb 2-1: config 0 has no interface number 2
[  224.490832][  T936] usb 2-1: config 0 interface 159 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  224.490857][  T936] usb 2-1: config 0 interface 159 altsetting 8 endpoint 0x7 has invalid wMaxPacketSize 0
[  224.490882][  T936] usb 2-1: config 0 interface 159 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 7
[  224.490919][  T936] usb 2-1: too many endpoints for config 0 interface 1 altsetting 1: 99, using maximum allowed: 30
[  224.490953][  T936] usb 2-1: config 0 interface 1 altsetting 1 has an endpoint descriptor with address 0x1A, changing to 0xA
[  224.490983][  T936] usb 2-1: config 0 interface 1 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 7
[  224.491013][  T936] usb 2-1: config 0 interface 1 altsetting 1 has a duplicate endpoint with address 0xA, skipping
[  224.491041][  T936] usb 2-1: config 0 interface 1 altsetting 1 endpoint 0xD has invalid maxpacket 512, setting to 64
[  224.491071][  T936] usb 2-1: config 0 interface 1 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 99
[  224.491110][  T936] usb 2-1: config 0 interface 249 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  224.491134][  T936] usb 2-1: config 0 interface 249 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  224.491158][  T936] usb 2-1: config 0 interface 249 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  224.491181][  T936] usb 2-1: config 0 interface 249 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  224.491205][  T936] usb 2-1: config 0 interface 159 has no altsetting 0
[  224.521993][ T6357] usb 1-1: config 0 descriptor??
[  224.601259][  T936] usb 2-1: config 0 interface 1 has no altsetting 0
[  224.693783][ T6357] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[  224.702906][  T936] usb 2-1: config 0 interface 249 has no altsetting 0
[  224.740883][  T936] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9
[  224.750534][  T936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.759072][  T936] usb 2-1: SerialNumber: syz
[  224.774204][  T936] usb 2-1: config 0 descriptor??
[  225.246873][  T936] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware
[  225.267117][  T936] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  225.292108][  T936] dib0700: firmware download failed at 7 with -22
[  225.319560][  T936] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware
[  225.338362][ T5240] Bluetooth: hci0: command tx timeout
[  225.348710][  T936] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  225.357064][  T936] dib0700: firmware download failed at 7 with -22
[  225.370595][  T936] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware
[  225.383076][  T936] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  225.392020][  T936] dib0700: firmware download failed at 7 with -22
[  225.402497][  T936] usb 2-1: USB disconnect, device number 19
[  225.721585][ T5300] usb 3-1: USB disconnect, device number 24
[  226.103214][ T6998] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.316522][ T6998] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.359568][   T30] audit: type=1326 audit(1727965242.053:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000
[  226.415603][   T30] audit: type=1326 audit(1727965242.053:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000
[  226.466184][   T30] audit: type=1326 audit(1727965242.053:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf7f57579 code=0x7ffc0000
[  226.506852][ T6364] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  226.535222][   T30] audit: type=1326 audit(1727965242.053:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000
[  226.629219][ T6998] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.667235][   T30] audit: type=1326 audit(1727965242.053:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7f57579 code=0x7ffc0000
[  226.713809][   T30] audit: type=1326 audit(1727965242.053:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000
[  226.745751][ T6364] usb 5-1: Using ep0 maxpacket: 8
[  226.745759][   T30] audit: type=1326 audit(1727965242.053:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f57579 code=0x7ffc0000
[  226.745802][   T30] audit: type=1326 audit(1727965242.053:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000
[  226.813883][ T6364] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  226.830242][ T6364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.840093][ T6364] usb 5-1: Product: syz
[  226.844307][ T6364] usb 5-1: Manufacturer: syz
[  226.849629][ T6364] usb 5-1: SerialNumber: syz
[  226.855587][   T30] audit: type=1326 audit(1727965242.093:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f57579 code=0x7ffc0000
[  226.892578][ T6364] usb 5-1: config 0 descriptor??
[  226.902030][ T6364] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  226.965801][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  226.984207][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  226.998658][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  226.999994][ T6998] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.009492][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  227.041223][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  227.049114][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  227.337068][ T6372] usb 10-1: device descriptor read/8, error -110
[  227.417048][ T5244] Bluetooth: hci0: command tx timeout
[  227.539239][ T6998] bridge_slave_1: left allmulticast mode
[  227.546032][ T6998] bridge_slave_1: left promiscuous mode
[  227.567398][ T6998] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.584563][ T6998] bridge_slave_0: left promiscuous mode
[  227.593267][ T6998] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.686996][ T5300] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  227.749141][ T6372] usb usb10-port1: attempt power cycle
[  227.862699][ T5300] usb 4-1: Using ep0 maxpacket: 8
[  227.903606][ T5300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.932517][ T5300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.960696][ T5300] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  227.985331][ T5300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.017393][ T5300] usb 4-1: config 0 descriptor??
[  228.022672][ T6359] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  228.186897][ T6359] usb 2-1: Using ep0 maxpacket: 8
[  228.212930][ T6359] usb 2-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=db.79
[  228.238210][ T6998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  228.247210][ T6359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.261543][ T6998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  228.266219][ T6359] usb 2-1: Product: syz
[  228.274702][ T6359] usb 2-1: Manufacturer: syz
[  228.280768][ T6359] usb 2-1: SerialNumber: syz
[  228.287825][ T6998] bond0 (unregistering): Released all slaves
[  228.305904][ T6359] usb 2-1: config 0 descriptor??
[  228.321244][ T6359] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx
[  228.333955][ T6372] usb usb10-port1: unable to enumerate USB device
[  228.462040][ T5300] lenovo 0003:17EF:6067.000A: unknown main item tag 0x0
[  228.476540][ T5300] lenovo 0003:17EF:6067.000A: item fetching failed at offset 5/7
[  228.485344][ T5300] lenovo 0003:17EF:6067.000A: hid_parse failed
[  228.504125][ T5300] lenovo 0003:17EF:6067.000A: probe with driver lenovo failed with error -22
[  228.568203][ T6357] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71)
[  228.580494][ T6357] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27
[  228.649060][ T6357] usb 1-1: USB disconnect, device number 12
[  228.714383][ T5300] usb 4-1: USB disconnect, device number 20
[  228.812035][ T7820] chnl_net:caif_netlink_parms(): no params data found
[  228.827448][ T6359] usb 2-1: USB disconnect, device number 20
[  228.839890][ T2038] usb 2-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2
[  228.897632][ T2038] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw
[  229.119940][ T5244] Bluetooth: hci1: command tx timeout
[  229.203306][ T6998] hsr_slave_0: left promiscuous mode
[  229.210017][ T6998] hsr_slave_1: left promiscuous mode
[  229.226107][ T6998] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.245316][ T6998] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.255320][ T6998] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.308432][ T6998] veth1_macvtap: left promiscuous mode
[  229.314030][ T6998] veth0_macvtap: left promiscuous mode
[  229.319828][ T6998] veth1_vlan: left promiscuous mode
[  229.325189][ T6998] veth0_vlan: left promiscuous mode
[  229.333335][ T5300] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  229.537153][ T5300] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.578032][ T5300] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  229.629681][ T5300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.660371][ T7857] input: syz1 as /devices/virtual/input/input28
[  229.677815][ T5300] usb 1-1: config 0 descriptor??
[  229.702547][ T5300] pwc: Askey VC010 type 2 USB webcam detected.
[  229.768861][ T7858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.449'.
[  229.893289][ T5300] pwc: send_video_command error -71
[  229.900640][ T5300] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  229.919254][ T5300] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[  229.942773][ T5300] usb 1-1: USB disconnect, device number 13
[  230.319062][ T6998] team0 (unregistering): Port device team_slave_1 removed
[  230.368844][ T5300] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  230.400844][ T6998] team0 (unregistering): Port device team_slave_0 removed
[  230.533311][ T5300] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  230.555312][ T5300] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  230.580118][ T5300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.591398][ T5300] usb 1-1: config 0 descriptor??
[  230.609715][ T5300] pwc: Askey VC010 type 2 USB webcam detected.
[  230.627880][ T6364] gspca_sonixj: reg_w1 err -71
[  230.632778][ T6364] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  230.657120][ T6364] usb 5-1: USB disconnect, device number 15
[  230.697924][ T6998] bridge_slave_0 (unregistering): left allmulticast mode
[  231.009034][ T5300] pwc: recv_control_msg error -32 req 02 val 2b00
[  231.017983][ T5300] pwc: recv_control_msg error -32 req 02 val 2700
[  231.026163][ T5300] pwc: recv_control_msg error -32 req 02 val 2c00
[  231.033608][ T5300] pwc: recv_control_msg error -32 req 04 val 1000
[  231.041850][ T5300] pwc: recv_control_msg error -32 req 04 val 1300
[  231.051068][ T5300] pwc: recv_control_msg error -32 req 04 val 1400
[  231.058552][ T5300] pwc: recv_control_msg error -32 req 02 val 2000
[  231.067261][ T5300] pwc: recv_control_msg error -32 req 02 val 2100
[  231.077713][ T5300] pwc: recv_control_msg error -32 req 04 val 1500
[  231.087432][ T5300] pwc: recv_control_msg error -32 req 02 val 2500
[  231.103589][ T5300] pwc: recv_control_msg error -32 req 02 val 2400
[  231.120644][ T5300] pwc: recv_control_msg error -32 req 02 val 2600
[  231.128651][ T5300] pwc: recv_control_msg error -32 req 02 val 2900
[  231.180869][ T5244] Bluetooth: hci1: command tx timeout
[  231.340148][ T5300] pwc: recv_control_msg error -71 req 04 val 1100
[  231.348640][ T5300] pwc: recv_control_msg error -71 req 04 val 1200
[  231.367465][ T7820] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.375064][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.404247][ T5300] pwc: Registered as video71.
[  231.411267][ T5300] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input29
[  231.431427][ T7820] bridge_slave_0: entered allmulticast mode
[  231.449971][ T7820] bridge_slave_0: entered promiscuous mode
[  231.472368][ T5300] usb 1-1: USB disconnect, device number 14
[  231.497941][ T7820] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.527029][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.534390][ T7820] bridge_slave_1: entered allmulticast mode
[  231.541444][ T6357] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  231.575754][ T7820] bridge_slave_1: entered promiscuous mode
[  231.616809][ T6364] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  231.679681][ T7820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.706768][ T6357] usb 4-1: Using ep0 maxpacket: 32
[  231.720674][ T6357] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  231.749208][ T7820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.772693][ T6996] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2
[  231.774911][ T6357] usb 4-1: config 0 has no interface number 0
[  231.825596][ T6364] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  231.826804][ T6357] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  231.855093][ T6364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  231.882564][ T6357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.892643][ T6357] usb 4-1: Product: syz
[  231.902274][ T6364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  231.909241][ T7820] team0: Port device team_slave_0 added
[  231.939667][ T6364] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  231.942832][ T7820] team0: Port device team_slave_1 added
[  231.959807][ T6357] usb 4-1: Manufacturer: syz
[  231.964557][ T6357] usb 4-1: SerialNumber: syz
[  231.966766][ T6364] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  231.986325][ T6364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.048472][ T6364] usb 5-1: config 0 descriptor??
[  232.054200][ T7864] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  232.078164][ T6357] usb 4-1: config 0 descriptor??
[  232.111713][ T6357] smsc95xx v2.0.0
[  232.177630][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.210367][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.283324][ T7820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  232.371718][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_1
[  232.387724][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.431279][ T7820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.496283][ T6364] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  232.527780][ T6364] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  232.541018][ T6357] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  232.566940][ T6357] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  232.722114][ T7820] hsr_slave_0: entered promiscuous mode
[  232.733580][ T7820] hsr_slave_1: entered promiscuous mode
[  232.741787][ T7820] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  232.758654][ T7820] Cannot create hsr debugfs directory
[  232.929980][ T5296] usb 5-1: USB disconnect, device number 16
[  233.257102][ T5244] Bluetooth: hci1: command tx timeout
[  233.860990][ T7820] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  233.889365][ T7820] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  233.908828][ T7820] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  233.937068][ T7820] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  234.298798][ T7820] 8021q: adding VLAN 0 to HW filter on device bond0
[  234.325954][ T7820] 8021q: adding VLAN 0 to HW filter on device team0
[  234.377062][ T6990] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.384300][ T6990] bridge0: port 1(bridge_slave_0) entered forwarding state
[  234.433503][ T7000] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.440724][ T7000] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.449886][ T7923] netlink: 64 bytes leftover after parsing attributes in process `syz.4.459'.
[  234.544153][ T7820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  234.653463][ T7820] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.767465][ T7820] veth0_vlan: entered promiscuous mode
[  234.819384][ T7820] veth1_vlan: entered promiscuous mode
[  234.907810][ T7820] veth0_macvtap: entered promiscuous mode
[  234.929224][ T7820] veth1_macvtap: entered promiscuous mode
[  234.965147][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.986334][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.027050][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.067289][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.105260][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.135721][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.165579][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.188730][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.209968][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.236662][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.268495][ T7820] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.314005][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.338054][ T5244] Bluetooth: hci1: command tx timeout
[  235.353905][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.378709][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.392987][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.403097][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.413994][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.425532][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.459198][ T6357] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000008: -71
[  235.466740][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.496117][ T6357] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  235.501868][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.536758][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.549487][ T6357] usb 4-1: USB disconnect, device number 21
[  235.567482][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.585507][ T7934] fuse: root generation should be zero
[  235.599903][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.640170][ T7820] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.688882][ T7820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.721165][ T7820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.748721][ T7820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.776871][ T7820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.036702][ T2550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.044688][ T2550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.099724][ T6990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.122958][ T6990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.308258][ T5244] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  236.317061][ T5244] Bluetooth: hci2: Injecting HCI hardware error event
[  236.326078][ T5244] Bluetooth: hci2: hardware error 0x00
[  236.622158][ T6996] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.886831][ T6996] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.976876][ T6357] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  237.063421][ T6996] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.152748][ T6357] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  237.172667][ T6357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.214080][ T6357] usb 4-1: config 0 descriptor??
[  237.245789][ T6357] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  237.300718][ T6996] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.355827][ T5247] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  237.368356][ T5247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  237.377467][ T5247] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  237.387770][ T5247] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  237.400600][ T5247] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  237.429103][ T5247] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  237.722894][ T6996] bridge_slave_1: left allmulticast mode
[  237.729919][ T6996] bridge_slave_1: left promiscuous mode
[  237.735820][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.785294][ T6996] bridge_slave_0: left allmulticast mode
[  237.801697][ T6996] bridge_slave_0: left promiscuous mode
[  237.818013][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.466845][ T5244] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  238.644986][ T6996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.677395][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'.
[  238.691186][ T6996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.721517][ T6996] bond0 (unregistering): Released all slaves
[  238.976300][ T5247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  238.987938][ T5247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  239.009092][ T5247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  239.051146][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  239.057113][ T5247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  239.072654][ T5247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  239.086186][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'.
[  239.096209][ T5247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  239.101946][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'.
[  239.222232][ T7976] chnl_net:caif_netlink_parms(): no params data found
[  239.390570][ T8015] bridge_slave_0: left allmulticast mode
[  239.400021][ T8015] bridge_slave_0: left promiscuous mode
[  239.405986][ T8015] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.484676][ T8019] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.496724][ T5244] Bluetooth: hci3: command tx timeout
[  239.559533][ T6996] hsr_slave_0: left promiscuous mode
[  239.653423][ T6996] hsr_slave_1: left promiscuous mode
[  239.669440][ T6357] usb 4-1: USB disconnect, device number 22
[  239.687200][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.731568][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.872691][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.883180][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.908527][ T6996] veth1_macvtap: left promiscuous mode
[  239.914208][ T6996] veth0_macvtap: left promiscuous mode
[  239.920154][ T6996] veth1_vlan: left promiscuous mode
[  239.925739][ T6996] veth0_vlan: left promiscuous mode
[  240.116874][ T5298] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  240.306144][ T5298] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  240.325477][ T5298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.344757][ T5298] usb 3-1: config 0 descriptor??
[  240.362254][ T5298] cp210x 3-1:0.0: cp210x converter detected
[  240.566584][ T6996] team0 (unregistering): Port device team_slave_1 removed
[  240.631167][ T6996] team0 (unregistering): Port device team_slave_0 removed
[  241.179427][ T5244] Bluetooth: hci2: command tx timeout
[  241.367266][ T8040] 
[  241.369660][ T8040] =====================================================
[  241.376611][ T8040] WARNING: SOFTIRQ-READ-safe -> SOFTIRQ-READ-unsafe lock order detected
[  241.384990][ T8040] 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 Not tainted
[  241.392105][ T8040] -----------------------------------------------------
[  241.399135][ T8040] syz.2.477/8040 [HC0[0]:SC0[8]:HE1:SE0] is trying to acquire:
[  241.406690][ T8040] ffff888076e2a1e0 (&pch->downl){+.+.}-{2:2}, at: ppp_connect_channel+0x194/0x650
[  241.416067][ T8040] 
[  241.416067][ T8040] and this task is already holding:
[  241.423439][ T8040] ffff8880789e8e10 (&ppp->rlock){+...}-{2:2}, at: ppp_connect_channel+0x185/0x650
[  241.432727][ T8040] which would create a new lock dependency:
[  241.438621][ T8040]  (&ppp->rlock){+...}-{2:2} -> (&pch->downl){+.+.}-{2:2}
[  241.445781][ T8040] 
[  241.445781][ T8040] but this new dependency connects a SOFTIRQ-READ-irq-safe lock:
[  241.455691][ T8040]  (&pch->upl){++.-}-{2:2}
[  241.455721][ T8040] 
[  241.455721][ T8040] ... which became SOFTIRQ-READ-irq-safe at:
[  241.468272][ T8040]   lock_acquire+0x1ed/0x550
[  241.472884][ T8040]   _raw_read_lock_bh+0x3d/0x50
[  241.477764][ T8040]   ppp_input+0x3dc/0xa10
[  241.482100][ T8040]   ppp_sync_process+0x71/0x160
[  241.486956][ T8040]   tasklet_action_common+0x321/0x4d0
[  241.492344][ T8040]   handle_softirqs+0x2c5/0x980
[  241.497212][ T8040]   __irq_exit_rcu+0xf4/0x1c0
[  241.501903][ T8040]   irq_exit_rcu+0x9/0x30
[  241.506241][ T8040]   sysvec_call_function_single+0xa3/0xc0
[  241.511973][ T8040]   asm_sysvec_call_function_single+0x1a/0x20
[  241.518058][ T8040]   __tasklet_schedule_common+0x1fd/0x270
[  241.523809][ T8040]   ppp_sync_receive+0x3fc/0x8f0
[  241.528766][ T8040]   tty_ldisc_receive_buf+0x11f/0x170
[  241.534152][ T8040]   tty_port_default_receive_buf+0x6d/0xa0
[  241.539971][ T8040]   flush_to_ldisc+0x328/0x860
[  241.544743][ T8040]   process_scheduled_works+0xa63/0x1850
[  241.550396][ T8040]   worker_thread+0x870/0xd30
[  241.555091][ T8040]   kthread+0x2f0/0x390
[  241.559256][ T8040]   ret_from_fork+0x4b/0x80
[  241.563775][ T8040]   ret_from_fork_asm+0x1a/0x30
[  241.568639][ T8040] 
[  241.568639][ T8040] to a SOFTIRQ-READ-irq-unsafe lock:
[  241.576093][ T8040]  (&pch->downl){+.+.}-{2:2}
[  241.576128][ T8040] 
[  241.576128][ T8040] ... which became SOFTIRQ-READ-irq-unsafe at:
[  241.589026][ T8040] ...
[  241.589035][ T8040]   lock_acquire+0x1ed/0x550
[  241.596237][ T8040]   _raw_spin_lock+0x2e/0x40
[  241.600843][ T8040]   ppp_input+0x18b/0xa10
[  241.605181][ T8040]   pppoe_rcv_core+0x117/0x310
[  241.609957][ T8040]   __release_sock+0x243/0x350
[  241.614731][ T8040]   release_sock+0x61/0x1f0
[  241.619373][ T8040]   pppoe_sendmsg+0xd5/0x750
[  241.623984][ T8040]   __sock_sendmsg+0x221/0x270
[  241.628764][ T8040]   ____sys_sendmsg+0x52a/0x7e0
[  241.633629][ T8040]   __sys_sendmmsg+0x4a8/0x730
[  241.638399][ T8040]   __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  241.644076][ T8040]   __do_fast_syscall_32+0xb4/0x110
[  241.649281][ T8040]   do_fast_syscall_32+0x34/0x80
[  241.654223][ T8040]   entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  241.660652][ T8040] 
[  241.660652][ T8040] other info that might help us debug this:
[  241.660652][ T8040] 
[  241.670883][ T8040] Chain exists of:
[  241.670883][ T8040]   &pch->upl --> &ppp->rlock --> &pch->downl
[  241.670883][ T8040] 
[  241.682740][ T8040]  Possible interrupt unsafe locking scenario:
[  241.682740][ T8040] 
[  241.691090][ T8040]        CPU0                    CPU1
[  241.696461][ T8040]        ----                    ----
[  241.701828][ T8040]   lock(&pch->downl);
[  241.705923][ T8040]                                local_irq_disable();
[  241.712680][ T8040]                                lock(&pch->upl);
[  241.719109][ T8040]                                lock(&ppp->rlock);
[  241.725711][ T8040]   <Interrupt>
[  241.729203][ T8040]     lock(&pch->upl);
[  241.733287][ T8040] 
[  241.733287][ T8040]  *** DEADLOCK ***
[  241.733287][ T8040] 
[  241.741437][ T8040] 5 locks held by syz.2.477/8040:
[  241.746460][ T8040]  #0: ffffffff8f4b91e8 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x112/0x1cd0
[  241.755208][ T8040]  #1: ffff88807c1108c0 (&pn->all_ppp_mutex){+.+.}-{3:3}, at: ppp_connect_channel+0x5e/0x650
[  241.765437][ T8040]  #2: ffff888076e2a248 (&pch->upl){++.-}-{2:2}, at: ppp_connect_channel+0x87/0x650
[  241.774874][ T8040]  #3: ffff8880789e8e50 (&ppp->wlock){+...}-{2:2}, at: ppp_connect_channel+0x174/0x650
[  241.784563][ T8040]  #4: ffff8880789e8e10 (&ppp->rlock){+...}-{2:2}, at: ppp_connect_channel+0x185/0x650
[  241.794254][ T8040] 
[  241.794254][ T8040] the dependencies between SOFTIRQ-READ-irq-safe lock and the holding lock:
[  241.805203][ T8040]   -> (&pch->upl){++.-}-{2:2} {
[  241.810241][ T8040]      HARDIRQ-ON-W at:
[  241.814459][ T8040]                         lock_acquire+0x1ed/0x550
[  241.821010][ T8040]                         _raw_write_lock_bh+0x35/0x50
[  241.827915][ T8040]                         ppp_bridge_channels+0x32/0x4c0
[  241.834967][ T8040]                         ppp_ioctl+0xe8f/0x1cd0
[  241.841313][ T8040]                         ppp_compat_ioctl+0x161/0x770
[  241.848181][ T8040]                         __se_compat_sys_ioctl+0x510/0xc90
[  241.855474][ T8040]                         __do_fast_syscall_32+0xb4/0x110
[  241.862598][ T8040]                         do_fast_syscall_32+0x34/0x80
[  241.869456][ T8040]                         entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  241.877796][ T8040]      HARDIRQ-ON-R at:
[  241.881959][ T8040]                         lock_acquire+0x1ed/0x550
[  241.888477][ T8040]                         _raw_read_lock_bh+0x3d/0x50
[  241.895257][ T8040]                         ppp_channel_push+0x2c/0x220
[  241.902045][ T8040]                         ppp_write+0x2b0/0x3e0
[  241.908321][ T8040]                         vfs_writev+0x5a9/0xba0
[  241.914669][ T8040]                         do_writev+0x1b1/0x350
[  241.920924][ T8040]                         __do_fast_syscall_32+0xb4/0x110
[  241.928061][ T8040]                         do_fast_syscall_32+0x34/0x80
[  241.934924][ T8040]                         entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  241.943268][ T8040]      IN-SOFTIRQ-R at:
[  241.947436][ T8040]                         lock_acquire+0x1ed/0x550
[  241.954569][ T8040]                         _raw_read_lock_bh+0x3d/0x50
[  241.961374][ T8040]                         ppp_input+0x3dc/0xa10
[  241.967631][ T8040]                         ppp_sync_process+0x71/0x160
[  241.974401][ T8040]                         tasklet_action_common+0x321/0x4d0
[  241.981705][ T8040]                         handle_softirqs+0x2c5/0x980
[  241.988486][ T8040]                         __irq_exit_rcu+0xf4/0x1c0
[  241.995099][ T8040]                         irq_exit_rcu+0x9/0x30
[  242.001370][ T8040]                         sysvec_call_function_single+0xa3/0xc0
[  242.009118][ T8040]                         asm_sysvec_call_function_single+0x1a/0x20
[  242.017134][ T8040]                         __tasklet_schedule_common+0x1fd/0x270
[  242.024784][ T8040]                         ppp_sync_receive+0x3fc/0x8f0
[  242.031670][ T8040]                         tty_ldisc_receive_buf+0x11f/0x170
[  242.038977][ T8040]                         tty_port_default_receive_buf+0x6d/0xa0
[  242.046712][ T8040]                         flush_to_ldisc+0x328/0x860
[  242.053398][ T8040]                         process_scheduled_works+0xa63/0x1850
[  242.060978][ T8040]                         worker_thread+0x870/0xd30
[  242.067582][ T8040]                         kthread+0x2f0/0x390
[  242.073654][ T8040]                         ret_from_fork+0x4b/0x80
[  242.080079][ T8040]                         ret_from_fork_asm+0x1a/0x30
[  242.086855][ T8040]      INITIAL USE at:
[  242.090929][ T8040]                        lock_acquire+0x1ed/0x550
[  242.097366][ T8040]                        _raw_write_lock_bh+0x35/0x50
[  242.104153][ T8040]                        ppp_bridge_channels+0x32/0x4c0
[  242.111117][ T8040]                        ppp_ioctl+0xe8f/0x1cd0
[  242.117422][ T8040]                        ppp_compat_ioctl+0x161/0x770
[  242.124222][ T8040]                        __se_compat_sys_ioctl+0x510/0xc90
[  242.131431][ T8040]                        __do_fast_syscall_32+0xb4/0x110
[  242.138499][ T8040]                        do_fast_syscall_32+0x34/0x80
[  242.145285][ T8040]                        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  242.153536][ T8040]      INITIAL READ USE at:
[  242.158131][ T8040]                             lock_acquire+0x1ed/0x550
[  242.164997][ T8040]                             _raw_read_lock_bh+0x3d/0x50
[  242.172116][ T8040]                             ppp_channel_push+0x2c/0x220
[  242.179236][ T8040]                             ppp_write+0x2b0/0x3e0
[  242.185836][ T8040]                             vfs_writev+0x5a9/0xba0
[  242.192520][ T8040]                             do_writev+0x1b1/0x350
[  242.199124][ T8040]                             __do_fast_syscall_32+0xb4/0x110
[  242.206590][ T8040]                             do_fast_syscall_32+0x34/0x80
[  242.213800][ T8040]                             entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  242.222497][ T8040]    }
[  242.225172][ T8040]    ... key      at: [<ffffffff9a733fa0>] ppp_register_net_channel.__key.3+0x0/0x20
[  242.234642][ T8040]  -> (&ppp->wlock){+...}-{2:2} {
[  242.239702][ T8040]     HARDIRQ-ON-W at:
[  242.243778][ T8040]                       lock_acquire+0x1ed/0x550
[  242.250128][ T8040]                       _raw_spin_lock_bh+0x35/0x50
[  242.256831][ T8040]                       ppp_get_stats64+0xc3/0x290
[  242.263351][ T8040]                       dev_get_stats+0xad/0xa00
[  242.269709][ T8040]                       rtnl_fill_stats+0x47/0x880
[  242.276221][ T8040]                       rtnl_fill_ifinfo+0x18da/0x2270
[  242.283083][ T8040]                       rtmsg_ifinfo_build_skb+0x18a/0x260
[  242.290287][ T8040]                       rtmsg_ifinfo+0x91/0x1b0
[  242.296557][ T8040]                       register_netdevice+0x1774/0x1b00
[  242.303602][ T8040]                       ppp_dev_configure+0x883/0xb10
[  242.310391][ T8040]                       ppp_ioctl+0x797/0x1cd0
[  242.316611][ T8040]                       ppp_compat_ioctl+0x161/0x770
[  242.323513][ T8040]                       __se_compat_sys_ioctl+0x510/0xc90
[  242.330645][ T8040]                       __do_fast_syscall_32+0xb4/0x110
[  242.337606][ T8040]                       do_fast_syscall_32+0x34/0x80
[  242.344384][ T8040]                       entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  242.352584][ T8040]     INITIAL USE at:
[  242.356614][ T8040]                      lock_acquire+0x1ed/0x550
[  242.362880][ T8040]                      _raw_spin_lock_bh+0x35/0x50
[  242.369396][ T8040]                      ppp_get_stats64+0xc3/0x290
[  242.375835][ T8040]                      dev_get_stats+0xad/0xa00
[  242.382130][ T8040]                      rtnl_fill_stats+0x47/0x880
[  242.388571][ T8040]                      rtnl_fill_ifinfo+0x18da/0x2270
[  242.395344][ T8040]                      rtmsg_ifinfo_build_skb+0x18a/0x260
[  242.402466][ T8040]                      rtmsg_ifinfo+0x91/0x1b0
[  242.408630][ T8040]                      register_netdevice+0x1774/0x1b00
[  242.415572][ T8040]                      ppp_dev_configure+0x883/0xb10
[  242.422261][ T8040]                      ppp_ioctl+0x797/0x1cd0
[  242.428350][ T8040]                      ppp_compat_ioctl+0x161/0x770
[  242.434952][ T8040]                      __se_compat_sys_ioctl+0x510/0xc90
[  242.441985][ T8040]                      __do_fast_syscall_32+0xb4/0x110
[  242.448869][ T8040]                      do_fast_syscall_32+0x34/0x80
[  242.455474][ T8040]                      entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  242.463558][ T8040]   }
[  242.466144][ T8040]   ... key      at: [<ffffffff9a7340c0>] ppp_dev_configure.__key.67+0x0/0x20
[  242.475026][ T8040]   ... acquired at:
[  242.478919][ T8040]    lock_acquire+0x1ed/0x550
[  242.483614][ T8040]    _raw_spin_lock_bh+0x35/0x50
[  242.488571][ T8040]    ppp_connect_channel+0x174/0x650
[  242.493874][ T8040]    ppp_ioctl+0xdd4/0x1cd0
[  242.498394][ T8040]    ppp_compat_ioctl+0x161/0x770
[  242.503434][ T8040]    __se_compat_sys_ioctl+0x510/0xc90
[  242.508906][ T8040]    __do_fast_syscall_32+0xb4/0x110
[  242.514195][ T8040]    do_fast_syscall_32+0x34/0x80
[  242.519227][ T8040]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  242.525738][ T8040] 
[  242.528069][ T8040] -> (&ppp->rlock){+...}-{2:2} {
[  242.533044][ T8040]    HARDIRQ-ON-W at:
[  242.537039][ T8040]                     lock_acquire+0x1ed/0x550
[  242.543223][ T8040]                     _raw_spin_lock_bh+0x35/0x50
[  242.549654][ T8040]                     ppp_get_stats64+0x33/0x290
[  242.555997][ T8040]                     dev_get_stats+0xad/0xa00
[  242.562158][ T8040]                     rtnl_fill_stats+0x47/0x880
[  242.568501][ T8040]                     rtnl_fill_ifinfo+0x18da/0x2270
[  242.575183][ T8040]                     rtmsg_ifinfo_build_skb+0x18a/0x260
[  242.582214][ T8040]                     rtmsg_ifinfo+0x91/0x1b0
[  242.588288][ T8040]                     register_netdevice+0x1774/0x1b00
[  242.595143][ T8040]                     ppp_dev_configure+0x883/0xb10
[  242.601746][ T8040]                     ppp_ioctl+0x797/0x1cd0
[  242.607743][ T8040]                     ppp_compat_ioctl+0x161/0x770
[  242.614258][ T8040]                     __se_compat_sys_ioctl+0x510/0xc90
[  242.621196][ T8040]                     __do_fast_syscall_32+0xb4/0x110
[  242.627969][ T8040]                     do_fast_syscall_32+0x34/0x80
[  242.634478][ T8040]                     entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  242.642480][ T8040]    INITIAL USE at:
[  242.646382][ T8040]                    lock_acquire+0x1ed/0x550
[  242.652475][ T8040]                    _raw_spin_lock_bh+0x35/0x50
[  242.658818][ T8040]                    ppp_get_stats64+0x33/0x290
[  242.665073][ T8040]                    dev_get_stats+0xad/0xa00
[  242.671144][ T8040]                    rtnl_fill_stats+0x47/0x880
[  242.677402][ T8040]                    rtnl_fill_ifinfo+0x18da/0x2270
[  242.684002][ T8040]                    rtmsg_ifinfo_build_skb+0x18a/0x260
[  242.690947][ T8040]                    rtmsg_ifinfo+0x91/0x1b0
[  242.696937][ T8040]                    register_netdevice+0x1774/0x1b00
[  242.703706][ T8040]                    ppp_dev_configure+0x883/0xb10
[  242.710403][ T8040]                    ppp_ioctl+0x797/0x1cd0
[  242.716314][ T8040]                    ppp_compat_ioctl+0x161/0x770
[  242.722743][ T8040]                    __se_compat_sys_ioctl+0x510/0xc90
[  242.729607][ T8040]                    __do_fast_syscall_32+0xb4/0x110
[  242.736286][ T8040]                    do_fast_syscall_32+0x34/0x80
[  242.742708][ T8040]                    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  242.750612][ T8040]  }
[  242.753144][ T8040]  ... key      at: [<ffffffff9a7340a0>] ppp_dev_configure.__key+0x0/0x20
[  242.761750][ T8040]  ... acquired at:
[  242.765554][ T8040]    lock_acquire+0x1ed/0x550
[  242.770251][ T8040]    _raw_spin_lock_bh+0x35/0x50
[  242.775290][ T8040]    ppp_dev_uninit+0x6c/0x1a0
[  242.780075][ T8040]    unregister_netdevice_many_notify+0x1735/0x1da0
[  242.786683][ T8040]    unregister_netdevice_queue+0x303/0x370
[  242.792583][ T8040]    ppp_release+0xed/0x1f0
[  242.797098][ T8040]    __fput+0x23f/0x880
[  242.801277][ T8040]    task_work_run+0x24f/0x310
[  242.806056][ T8040]    syscall_exit_to_user_mode+0x168/0x370
[  242.811880][ T8040]    __do_fast_syscall_32+0xc4/0x110
[  242.817187][ T8040]    do_fast_syscall_32+0x34/0x80
[  242.822222][ T8040]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  242.828831][ T8040] 
[  242.831192][ T8040] 
[  242.831192][ T8040] the dependencies between the lock to be acquired
[  242.831206][ T8040]  and SOFTIRQ-READ-irq-unsafe lock:
[  242.845312][ T8040] -> (&pch->downl){+.+.}-{2:2} {
[  242.850297][ T8040]    HARDIRQ-ON-W at:
[  242.854288][ T8040]                     lock_acquire+0x1ed/0x550
[  242.860473][ T8040]                     _raw_spin_lock+0x2e/0x40
[  242.866648][ T8040]                     ppp_input+0x18b/0xa10
[  242.872551][ T8040]                     pppoe_rcv_core+0x117/0x310
[  242.878914][ T8040]                     __release_sock+0x243/0x350
[  242.885271][ T8040]                     release_sock+0x61/0x1f0
[  242.891375][ T8040]                     pppoe_sendmsg+0xd5/0x750
[  242.897545][ T8040]                     __sock_sendmsg+0x221/0x270
[  242.903886][ T8040]                     ____sys_sendmsg+0x52a/0x7e0
[  242.910309][ T8040]                     __sys_sendmmsg+0x4a8/0x730
[  242.916645][ T8040]                     __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  242.923854][ T8040]                     __do_fast_syscall_32+0xb4/0x110
[  242.930710][ T8040]                     do_fast_syscall_32+0x34/0x80
[  242.937221][ T8040]                     entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  242.945212][ T8040]    SOFTIRQ-ON-W at:
[  242.949203][ T8040]                     lock_acquire+0x1ed/0x550
[  242.955393][ T8040]                     _raw_spin_lock+0x2e/0x40
[  242.961584][ T8040]                     ppp_input+0x18b/0xa10
[  242.967582][ T8040]                     pppoe_rcv_core+0x117/0x310
[  242.973929][ T8040]                     __release_sock+0x243/0x350
[  242.980269][ T8040]                     release_sock+0x61/0x1f0
[  242.986347][ T8040]                     pppoe_sendmsg+0xd5/0x750
[  242.992518][ T8040]                     __sock_sendmsg+0x221/0x270
[  242.998861][ T8040]                     ____sys_sendmsg+0x52a/0x7e0
[  243.005285][ T8040]                     __sys_sendmmsg+0x4a8/0x730
[  243.011628][ T8040]                     __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  243.018839][ T8040]                     __do_fast_syscall_32+0xb4/0x110
[  243.025634][ T8040]                     do_fast_syscall_32+0x34/0x80
[  243.032166][ T8040]                     entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  243.040166][ T8040]    INITIAL USE at:
[  243.044070][ T8040]                    lock_acquire+0x1ed/0x550
[  243.050158][ T8040]                    _raw_spin_lock+0x2e/0x40
[  243.056243][ T8040]                    ppp_input+0x18b/0xa10
[  243.062096][ T8040]                    pppoe_rcv_core+0x117/0x310
[  243.068376][ T8040]                    __release_sock+0x243/0x350
[  243.074738][ T8040]                    release_sock+0x61/0x1f0
[  243.080739][ T8040]                    pppoe_sendmsg+0xd5/0x750
[  243.086906][ T8040]                    __sock_sendmsg+0x221/0x270
[  243.093159][ T8040]                    ____sys_sendmsg+0x52a/0x7e0
[  243.099496][ T8040]                    __sys_sendmmsg+0x4a8/0x730
[  243.105745][ T8040]                    __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  243.112956][ T8040]                    __do_fast_syscall_32+0xb4/0x110
[  243.119642][ T8040]                    do_fast_syscall_32+0x34/0x80
[  243.126064][ T8040]                    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  243.134001][ T8040]  }
[  243.136503][ T8040]  ... key      at: [<ffffffff9a733f80>] ppp_register_net_channel.__key.1+0x0/0x20
[  243.145799][ T8040]  ... acquired at:
[  243.149645][ T8040]    lock_acquire+0x1ed/0x550
[  243.154374][ T8040]    _raw_spin_lock_bh+0x35/0x50
[  243.159347][ T8040]    ppp_connect_channel+0x194/0x650
[  243.164661][ T8040]    ppp_ioctl+0xdd4/0x1cd0
[  243.169181][ T8040]    ppp_compat_ioctl+0x161/0x770
[  243.174222][ T8040]    __se_compat_sys_ioctl+0x510/0xc90
[  243.179692][ T8040]    __do_fast_syscall_32+0xb4/0x110
[  243.185037][ T8040]    do_fast_syscall_32+0x34/0x80
[  243.190074][ T8040]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  243.196595][ T8040] 
[  243.198946][ T8040] 
[  243.198946][ T8040] stack backtrace:
[  243.204871][ T8040] CPU: 1 UID: 0 PID: 8040 Comm: syz.2.477 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0
[  243.215747][ T8040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  243.225822][ T8040] Call Trace:
[  243.229117][ T8040]  <TASK>
[  243.232058][ T8040]  dump_stack_lvl+0x241/0x360
[  243.236755][ T8040]  ? __pfx_dump_stack_lvl+0x10/0x10
[  243.241964][ T8040]  ? __pfx__printk+0x10/0x10
[  243.246572][ T8040]  ? print_shortest_lock_dependencies+0xf2/0x160
[  243.252935][ T8040]  validate_chain+0x4ebd/0x5920
[  243.257805][ T8040]  ? __pfx_validate_chain+0x10/0x10
[  243.263025][ T8040]  ? __pfx_validate_chain+0x10/0x10
[  243.268239][ T8040]  ? __pfx_cgroup_rstat_updated+0x10/0x10
[  243.273972][ T8040]  ? __pfx___calc_delta+0x10/0x10
[  243.279014][ T8040]  ? register_lock_class+0x102/0x980
[  243.284326][ T8040]  ? __pfx_register_lock_class+0x10/0x10
[  243.289980][ T8040]  ? mark_lock+0x9a/0x360
[  243.294320][ T8040]  __lock_acquire+0x1384/0x2050
[  243.299197][ T8040]  lock_acquire+0x1ed/0x550
[  243.303721][ T8040]  ? ppp_connect_channel+0x194/0x650
[  243.309033][ T8040]  ? __pfx_lock_acquire+0x10/0x10
[  243.314079][ T8040]  ? ppp_connect_channel+0x194/0x650
[  243.319383][ T8040]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  243.325215][ T8040]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  243.330604][ T8040]  ? ppp_connect_channel+0x194/0x650
[  243.335921][ T8040]  _raw_spin_lock_bh+0x35/0x50
[  243.340724][ T8040]  ? ppp_connect_channel+0x194/0x650
[  243.346066][ T8040]  ppp_connect_channel+0x194/0x650
[  243.351217][ T8040]  ? __might_fault+0xaa/0x120
[  243.355927][ T8040]  ppp_ioctl+0xdd4/0x1cd0
[  243.360280][ T8040]  ? wake_up_q+0xdc/0x120
[  243.364627][ T8040]  ? __mutex_unlock_slowpath+0x6f9/0x750
[  243.370278][ T8040]  ? __pfx_ppp_ioctl+0x10/0x10
[  243.375067][ T8040]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  243.381091][ T8040]  ? __pfx_lock_acquire+0x10/0x10
[  243.386161][ T8040]  ppp_compat_ioctl+0x161/0x770
[  243.391046][ T8040]  ? __pfx_ppp_compat_ioctl+0x10/0x10
[  243.396453][ T8040]  ? __fget_files+0x29/0x470
[  243.401072][ T8040]  ? __fget_files+0x3f3/0x470
[  243.405766][ T8040]  __se_compat_sys_ioctl+0x510/0xc90
[  243.411070][ T8040]  ? __pfx___se_compat_sys_ioctl+0x10/0x10
[  243.416892][ T8040]  ? blkcg_maybe_throttle_current+0x1ab/0xb80
[  243.422983][ T8040]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  243.429013][ T8040]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  243.435396][ T8040]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  243.442102][ T8040]  ? lockdep_hardirqs_on+0x99/0x150
[  243.447407][ T8040]  __do_fast_syscall_32+0xb4/0x110
[  243.452536][ T8040]  ? ret_from_fork_asm+0x1a/0x30
[  243.457514][ T8040]  ? lockdep_hardirqs_on+0x99/0x150
[  243.462736][ T8040]  do_fast_syscall_32+0x34/0x80
[  243.467615][ T8040]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  243.473972][ T8040] RIP: 0023:0xf749d579
[  243.478324][ T8040] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  243.497947][ T8040] RSP: 002b:00000000f574456c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  243.506374][ T8040] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000004004743a
[  243.514448][ T8040] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000
[  243.522460][ T8040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  243.530448][ T8040] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  243.538428][ T8040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  243.546446][ T8040]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  243.593281][ T5244] Bluetooth: hci3: command tx timeout
[  243.599070][ T5244] Bluetooth: hci2: command tx timeout
[  243.686873][ T8034] bridge0: port 3(syz_tun) entered blocking state
[  243.693454][ T8034] bridge0: port 3(syz_tun) entered disabled state
[  243.706197][ T8034] syz_tun: entered allmulticast mode
[  243.776093][ T8034] syz_tun: entered promiscuous mode
[  243.802556][ T8034] bridge0: port 3(syz_tun) entered blocking state
[  243.809187][ T8034] bridge0: port 3(syz_tun) entered forwarding state
[  243.908035][ T5298] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71
[  243.915681][ T5298] cp210x 3-1:0.0: querying part number failed
[  243.937002][ T5298] usb 3-1: cp210x converter now attached to ttyUSB0
[  243.954306][ T5298] usb 3-1: USB disconnect, device number 25
[  243.968478][ T5298] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  244.011873][ T5298] cp210x 3-1:0.0: device disconnected
[  244.224173][ T8034] bridge0: port 3(syz_tun) entered disabled state
[  244.245799][ T8034] syz_tun (unregistering): left allmulticast mode
[  244.259563][ T8034] syz_tun (unregistering): left promiscuous mode
[  244.266158][ T8034] bridge0: port 3(syz_tun) entered disabled state
[  244.557062][ T6996] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.661373][ T6996] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.702890][ T6996] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.771545][ T6996] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.880891][ T6996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.932063][ T6996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.003942][ T6996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.072467][ T6996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.194970][ T6996] bridge_slave_1: left allmulticast mode
[  245.206821][ T6996] bridge_slave_1: left promiscuous mode
[  245.212586][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.221767][ T6996] bridge_slave_0: left allmulticast mode
[  245.227830][ T6996] bridge_slave_0: left promiscuous mode
[  245.233554][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.243365][ T6996] bridge_slave_1: left allmulticast mode
[  245.252189][ T6996] bridge_slave_1: left promiscuous mode
[  245.258265][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.275515][ T6996] bridge_slave_0: left allmulticast mode
[  245.283090][ T6996] bridge_slave_0: left promiscuous mode
[  245.292519][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.643154][ T6996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  245.653610][ T6996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  245.666212][ T6996] bond0 (unregistering): Released all slaves
[  245.681968][ T6996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  245.692901][ T6996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  245.702893][ T6996] bond0 (unregistering): Released all slaves
[  245.714214][ T6996] bond0 (unregistering): Released all slaves
[  246.080122][ T6996] hsr_slave_0: left promiscuous mode
[  246.086436][ T6996] hsr_slave_1: left promiscuous mode
[  246.092979][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.101110][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.110035][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.119954][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.132030][ T6996] hsr_slave_0: left promiscuous mode
[  246.138361][ T6996] hsr_slave_1: left promiscuous mode
[  246.144301][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.154932][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.164163][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.174770][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.190144][ T6996] veth1_macvtap: left promiscuous mode
[  246.195819][ T6996] veth0_macvtap: left promiscuous mode
[  246.202229][ T6996] veth1_vlan: left promiscuous mode
[  246.210470][ T6996] veth0_vlan: left promiscuous mode
[  246.217834][ T6996] veth1_macvtap: left promiscuous mode
[  246.223394][ T6996] veth0_macvtap: left promiscuous mode
[  246.233120][ T6996] veth1_vlan: left promiscuous mode
[  246.238961][ T6996] veth0_vlan: left promiscuous mode
[  246.467574][ T6996] team0 (unregistering): Port device team_slave_1 removed
[  246.493206][ T6996] team0 (unregistering): Port device team_slave_0 removed
[  246.742702][ T6996] team0 (unregistering): Port device team_slave_1 removed
[  246.771250][ T6996] team0 (unregistering): Port device team_slave_0 removed
[  247.625936][ T6996] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.675723][ T6996] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.723367][ T6996] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.778363][ T6996] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.866306][ T6996] bridge_slave_1: left allmulticast mode
[  247.879845][ T6996] bridge_slave_1: left promiscuous mode
[  247.885627][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.016465][ T6996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  248.029421][ T6996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  248.039468][ T6996] bond0 (unregistering): Released all slaves
[  248.211333][ T6996] hsr_slave_0: left promiscuous mode
[  248.217762][ T6996] hsr_slave_1: left promiscuous mode
[  248.223713][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.233486][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.241708][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.251660][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.263669][ T6996] veth1_macvtap: left promiscuous mode
[  248.271561][ T6996] veth0_macvtap: left promiscuous mode
[  248.278402][ T6996] veth1_vlan: left promiscuous mode
[  248.283727][ T6996] veth0_vlan: left promiscuous mode
[  248.458948][ T6996] team0 (unregistering): Port device team_slave_1 removed
[  248.488948][ T6996] team0 (unregistering): Port device team_slave_0 removed
[  251.145846][ T7000] bond0 (unregistering): Released all slaves