last executing test programs:

3m53.624274173s ago: executing program 32 (id=1233):
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x7fffffffffffffff, 0x0, 0x4, 0x21, 0x8, "0f74aaa2f4af11f6ffa35d446b8ef9f0732beeb2239ae850dab40884c1b27a779803e2175893261101ba32e857e8b58f6025f9d864028bead5175d01c938ae88", "d137397b58a2b40800000000000000cfb62c8fb6814ed9f09dbad8d629071742237eac095126a9905cd74607098d80d875f850fdffaf70f8aa755c7842540162", "34c258af26e2b617090000001359e53d03d200", [0x4, 0x800000000000000]})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x3, 0x79b})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="360000001000032400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'], 0x20}}, 0x0)
io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)

2m1.428434413s ago: executing program 33 (id=2358):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000025a000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, &(0x7f00000021c0)=[{0x4, 0xffffffff, 0x3}], 0x1, 0x6, 0x0, 0x40, 0x38})

1m58.936892945s ago: executing program 1 (id=2375):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1})
io_uring_enter(r1, 0xd44, 0x44c1, 0x7, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x7c2f})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

1m58.586653878s ago: executing program 1 (id=2377):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m58.307943294s ago: executing program 1 (id=2379):
r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc1}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"])
pipe2$watch_queue(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xee)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0)
keyctl$clear(0x3, r0)

1m58.227358264s ago: executing program 1 (id=2380):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220)

1m58.059286811s ago: executing program 1 (id=2381):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x109400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x2000})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m57.716395217s ago: executing program 1 (id=2385):
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000ff1c1b1f1c4000010203010902240001010800fe09040000020301025f09210800060122cb0f09058103ff03"], 0x0)
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0)
openat(0xffffffffffffffff, 0x0, 0x60000, 0x51)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000cc0)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23", 0x64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])

1m57.162108561s ago: executing program 34 (id=2385):
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000ff1c1b1f1c4000010203010902240001010800fe09040000020301025f09210800060122cb0f09058103ff03"], 0x0)
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0)
openat(0xffffffffffffffff, 0x0, 0x60000, 0x51)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000cc0)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23", 0x64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])

1m26.744338828s ago: executing program 7 (id=2648):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r1 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x8402, &(0x7f00000044c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f0000001ec0)={&(0x7f0000001580)={0x50, 0x0, 0x3, {0x7, 0x29, 0x9f53, 0x0, 0x691a, 0x48e, 0x1000, 0x7fff, 0x0, 0x0, 0x80, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)={0x20, 0x0, 0x1000000000007, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000004400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004380)={0x78, 0x0, 0x40, {0x100000000008000, 0x40003, 0x0, {0x5, 0xfffefeffffffffff, 0x5fffffff, 0x2, 0x1, 0x7, 0x7, 0x7, 0x8, 0x6000, 0x9, 0x0, 0x0, 0x80, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fstat(r1, 0x0)

1m26.436643422s ago: executing program 7 (id=2650):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10)

1m25.31031933s ago: executing program 7 (id=2654):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x74, r2, {}, {0x7, 0x10}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0x2000c084)

1m24.994789508s ago: executing program 7 (id=2656):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0)
move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)

1m24.870179817s ago: executing program 7 (id=2657):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = userfaultfd(0x801)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

1m24.716359573s ago: executing program 7 (id=2658):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0, 0x0, 0x0, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x2)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})

1m24.223547219s ago: executing program 35 (id=2658):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0, 0x0, 0x0, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x2)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})

1m16.194348461s ago: executing program 5 (id=2716):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
fsopen(0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "9303"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, "0100"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x8, "749e821c"}, @local=@item_4={0x3, 0x2, 0x0, "8b923659"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x1b23, 0x2ff, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"})

1m15.435173511s ago: executing program 5 (id=2721):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10)

1m15.163430206s ago: executing program 5 (id=2725):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x1714, &(0x7f00000020c0)={0x0, 0x4, 0x10100, 0xfffffffd, 0xd5}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}})
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"eb9d8988e81b395b45bd0cba3a8483077474dd3dd0c47bc253e59f35008b53e42578e610c78571ad7fd714bbf1d6fd513c82063c7b62f80247dae47c5c719fcb141465938af815fb5f2695978afaf02bc89e649ba154d25cd9128fa00c4655085aaa52d42552f2b09df1d9bb0e372396aa8bcb1358797975a22d2c6675102a2744764709002ff83c2341d3365f98a022a3adb2984c475f59af4129dbfd9a93d73ebd4e3cb4f1e4ab97495820ac3a2091f1a472e09074da690ef8a1271c19fa97898e3be7b5000d91bbc78a0e2415b557a6ac425159469271188e5adbb631ee32f1c01b8aab308dad8548079f00eb770e058ec6480cb78a47d832ff6f7d34348118d2a8a317c1d0cb05299e4541dd566ca584cbe7508ab24fa6fdd1e5fd301a57f7b01f55543d5289911b1040011acfa9247e9f2b08635fc066b8725bc114c59fdbdd3a35903b19613e3f29ce4457a59c64567f1fea4a17185e7edde0ccc64cf9d0086ef292c318c8a56b28406cdcfd091245a8e0fa721e11aa064b642d9afbcf3dd23c79c466e634e84e0ccf866e8bcc03a6e6ac823fe6056a7aa6aa8622969e263eff3fb74ea46e0bd6a1ce08244e39f59df03e6cdd7fdc2811c4c1719099a56f1c5e07ab0e7d6a07192dcc0d03f6bcbc2323f4606b52950e3ebf54b379a97bb4c0c27db1e0824068a353aa025258f16eec23148997eb0f14ade49c1216cfd2ce324f289ddcf0ff8247984c4567692e9b64c2fbbc1272a3e532122e65f97cec13564ece0b7029c2c34ca9c7a9557d487336d849513afaaaa6c1a0388e72dba891750cebb09747cdadd4228b66ce5972f9c67bc4bd795753bc83fd36897edb29a4d9ca5c5cbb0e92dab163d6c980ef76a5f79f6f05f9a7e0e745a129cbbfc12281f9566f656b1f9de9bec23d3a2bec3852430fb7dcbc692e0fcccb69402639a0e1693a70a5983a462b001131a4774e5e3d8bd9a19389ab7e819a77ae145d2ca8e4477215905e8e1dce02ccd3f8942744313a30b68025844e5a68a9a2dd382a3a32042c232459a776d6e1741eec549b4d3d67580fc511393281917f5145952997aebd29d8056d4282586ccd91d633a7c1764012e09d7746fef7246eb56640fef2bdd74b78fbcaa32e6b6f4136431a51229956a8a8149de241511e2760f997886e098fc1847adee880f3ae61a1240581e13758be18a33bde20ffad43a0ae9a4f7144a16993858e445c7c5bc83e13dfeb81ae6fc11be70e0ab490ab976106e3d8e627c44df3ac588239fbf885a2439b69e5a121245fd3c42c86555b1900100000000000009ff3f61da76d389b0fc1e6c39df6608824babcb098c509e0def7f1701e67ab7d6c64ab5150eaaadbe38a11673fee8d286d88ae6f39241966fa6df46464166cb4f41d67596d9d67630a5e12f07d8cfa4183f2c28b27a6105d69804508235f877693cf1f359ffb95b585496b941c2e3f2170d916ded547beee1ae24e1724f17cb85cfcba15e1cbabe44e60b16c2ac4f4afed9506e25bd35a8897de4ae4a4c929b25289f75b2da34a1b65edfc2dd74b74b8f3d74f1387805cf5933a616798fa890718c9ebd6079c26a5f732298f8e8a2e378fccffd7fc3ecc8b10d1cd013a7340b7842c4b1dff0e9f2ea70329fb9c0213151f43fa5bad0dd5f61a92da5a78e68052ab72c38d915136184a49da2a6b6e248e9d106777c1bde4dfc94f8a4a29dfa95fe768a34b34e93844fc8ed8a84b59f7e657a025592db7a7252491b18695693a68d178564909e5971b8956479e518a1202af31718fe22f4e65c93a9a08e802e07fd274e5a23cb466a7b40cf344a2176d61ef27d348b40a510e8cc8e372693cb6c1c7cfb4e3972fbe4204f0048bc53793e049b0484b3bbe6d3b6a986bc2c95fdb63f60ebfdbea38b48405a8b85ee84568fb6921a75fb54e9026671ed43b923286d64d60c9060a86c2217f98f049259d99d0c5ce4889b165557fa4536a6d5222eb289a6dd83ff235dbde83897d1627f6dc5c3e551997007b5219c5b010d53b92879e19951ba21db665f724d7c45da7c635f3a982047a1ebed638dca4f3e97ee036e18ae68d37cd8fda64fac7dce84587311b2e17420c31d50a5da4d052052ea1b4116aa9a0ef20434420c51887cf2d03a1d578925f19e700451f404413f7371693f2e0a622e1ae49daccd12de5ec59d2acbb635d854ce22a418f143c3a637dc731d45c5d1c38adcb770602a92f3de006a4eef1d838b91178476ff168fa639eb5b420da8a343a0ec6e6144cc802eb08d1833beb6ca18ffa1fd7b019bb2d02c97d62963a8a9180769323d8e45639b68aaa56775306bdc6c020678ecd64e751fb92c85dc474bbde8f94c029d92dea48b837c7b5524dc061374e637e299fef6b1355ce23d0f649f0e61402d365bb444a37a22a812821ade48df3be021ecacff6873654bf21e111d079f5bb14056807000000000000006ab983eb8fe903286fdf114024622f443686078c8318329aebe5df891a9a91bd5512b3aed59557de62d1a9586e10fa07306f815fc1fe04200d6282813f729c3f8e8af7c450f55037397125ef5e806306a9ba351a6f3e1dede486bc75ae897581b649ef55f19c97b330c5a61a6f76674722429ea894d1c638074cedb0b863514c19166a5c2baf4ee6d1eaeee85155afd10fdd4361c78b3c0d00d01a37df52be0ed3458bf8a1afa0c8c9a2f3406b1e4607e955f57f626c7ed2efac888e72110e0dc0f79cfdd02bc245f0b3a7939bbdc31229ab99ecd36927e1fdd7b17b5037457856fe3f773b6af24af6d67cbd7978e2f127b86b50153e9b0f13f4942006198d6a6ac335cf7560676fd607e6a3a7b518fa815def5eca1372813f97d6ea9d62b848db37015aa648c842678372c628332fad5f72c919a6f96d1c3b0a97df4c1892ff814e2e57979da7f7098c42b963ca5929765b1ad2284abd2c1f7ef9570b8c97a513da8f4078130e70f31327708619331571d78d3475b6b41e835dc948f0e809c6610942e4c7d515d9303e6281a3980a741bc85f4528fddc34d22bbd9aa4b4b2351df10884f1dbc877717d984b0b3bafda47801103cda459d006a9a9982f5cf67fc0face3def54d579358e623dae4d9b4248cebd82111cf4c431f8852bcf862a65a124ca709cec2454e4c65514128bc2d6f8cc92624f20c02b008081d334cc7fa0b8e8d9d3dfe2a283600e875c7ecb8e4949f958f6f84f8e52b78e3eae58fa02d85bb8ac52ddf3b262ec52eca50d6d590139c24c042e1c040d8da6c9a2e85055dc91ed65881bc4c43c13c240eb9f6ef9a4cffb44e96c9c055cbbc10b5d63850bc3e2fa46aabb2c732c0c31bf1dba3ad1ce2b1b671259aaaef955d39c420b18d78828248563cacd9417ef2cb63859ebef3936e26803e7ccf5233cb3c0a2f440d898ff258cb03a783415a6f8041b1a07bb5cef530c78c30ec9adfd2df246d581bc662336d5029f65588995adc3190e97a418c15fa3620eb68cdcc6233f1aa0009ab558b22ae9316003c6af1fe0d7807e583943e48692fcd9fa2525fefe3467d099951c83943312f0e889ccf4c1ecf17ad469f5ad683b405eb59230e89df96e8dd94e41e5f22822ba957e065f22d96b1c0c2b83f5a57fbb04d5af399ece3ddd52e5afff783a876e2066fbe30963421acb427c95fd3e7bc6b7d3d731a7e347052cd9636805cab94ad40bdb63a264b3127c7f8d21d25810bd2eadb2c3e31b5c807283ad062d750e5b21ec1e20cc3ac5753ac536faf23e2b5c37e9d021870b0350ecea7187643a00a08ec3ffaf7e6c236c4d694ff41af7b5fbf8a554949f5026a8b2adcf377f94848cd17fbcc0249e796008962d3db16b4bb85483dbe75ef5b301175e052203436b38248fbd1a28a5e2b3ab75c77eb8f853e60e95d5f16cb9858b33b3752b4c69776ec4506ba2bd490a6f17aae1152d8762d86cc0ef32788cf149e8fa9464c0ea588f15d8eb2092254c470acf221cfe680845167fc6778b8af1609681ae4f4e65426ce059b9768eb2e0c89f29de7b91db89a72e4c677c65dd980f9a6bfa656ed01d5e683a33e6b80462139476225cc0fcc309d926c36aa250bdad1454db46cd2536046f909a05b08829cad973bc705231a32a5f2e7ac5e96e2315cb175724607a5af02073fc936272aa724990ba6dcc4ea79da6eb7ec0bbdbd0a878114c493bc4b3e26e24b18553bd0a617981d8ea9e91ed2e3bcbd48f5d67aa913790bf52c31435184d6c73079e964e9ef05194e88b072b372d48cb70dbca99238c4474ed0b6932cc1b233bce0c87d48d478fa3c937c42c8637714e9995041f8b2b7dce17eb2f26c730f5559cf5919b88ee00bbf40726f90e1cf29e0f5fadc64de1bf28d447e8996948dc2fe658620b6fb8cfc592d5e0621b66057eb774c31ab16235456210c5ee7990b71b5b3d51cf131e7e9e572d228c7bbcdaba40d8d0eb4de13bda1fca38d3ed667bb0897335aadaa0c3905a1283292c89ef5747ad5462d94011c3f8a4a476aa78d74badf8bf3785997ba9824e21256eed4c2805331fa24c81e28f21e895a0b03e7de52787065faded0f1b59eba1c922dce5576e8ab190ef716c421d8dfa13a1e73b8962d9f9238ba8b9fa2cf84addfe37e78cdb398ee4c0642a716fb8db1e332f873a16c6225ebc51fe05f33273380e64272159bb808336e87b4b0cddb492a992b2e7f423bf37725e1d9dda0dc6b4426172c2a93ee1cc9acea7fe1ece9ba0ddee3e232efb11fc4d4e266cd2a83c017e32315c434b73e9729d5a3a7fe993e72f9bb70d78672493263a2653fe1bfd42d1f97cbf0fffb6705b2e35fe65cee353fe6259b0d1c127352db9c194939559ebb3b505a58e0404103482ce10f7d67761c13b235b52ad1b25803aa94cf7df5ca8d8bd0d4e6d0ab8bcfb8f72a26cecf071e31c02a1034c0144d850f1732926981dca7a18f0a197da3703d74d3e951ed510ed38a8fcae93eb2bebdf92e0feb0f06dbe1331cb43cfa548ca294ea479ecb325aea7aff8d924745298a3d34f23f40b992995a908130165b44beb8cc9da8390dae2a09cb7e1ac7e95b84f35e7be147b4be04883047cdcaec662aa8b66694ae8914e65edb63696494bff66eacb3aecdb23746a36cec7f832d628d38698ba6b3d4020095eae2a5b36a21039ce50901cdf2582b88ab8c86c6f4a8c0b0000000d7aab081edb3ce8e4479e0ac476112d4b261cb8ed952221fb660898491fc7134b091c0565173bebf014caffae12852b5314c930d41e27bcfa7bc536fc4da3b714630e1ac7aaf006755da1da792dcad08f796c2ebdd6427ad3374e25132a103d62f98584462aa164d742b4d7c668a85119480199dd90f0a903f6c76cfca28b84a2279ae6965fdec403072be146d2d1f39b122113fbcfb52cf8c7c1d47a32f437b895bcd7a67ad08f196112a15b07e5b57b4db2b7c7f70a42923d6d0625515375b9281d331bd1e5dd75ff3a6e1ca5b75eb328e6c935f2c8f0c57b0aaf2ad85983160b0e53fca44d95e956ef2726d97acb2da34ca4482bb86aabde6d8b8b85da2e44ae89b8359f7edb88a3e2a9aad23125b8c2bd0c7be0847ac9b1e16db2c395e0c9eb040af710c31d32f7b356bfb6f1704f4d884f37c15b865eda87685ae8926fbf3a4465e7e2968ee18ea1ff5d4f4c25aeb9082dc4dc19f0bce5b9cf10779299893cf64980193fd3a1096507e7a8be00", 0x1000}}, 0x1006)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x43}, 0x15, 0x3, 'fo\x00', 0x1, 0x4, 0x72}, 0x2c)
io_uring_enter(r1, 0x27e2, 0x0, 0x7, 0x0, 0x0)

1m14.923903921s ago: executing program 5 (id=2727):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220)

1m14.735356728s ago: executing program 5 (id=2728):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000000)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)={0x2, 0x0, [{0x41000, 0x1000, &(0x7f0000000900)=""/4096}, {0x2000, 0xbc, &(0x7f00000001c0)=""/188}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000008c0)=0x0)

1m13.463597113s ago: executing program 5 (id=2735):
memfd_create(&(0x7f0000000000)='l2\xaa*\xaa\xaa\xabI\xf9\xbf\x83f|\xc3\x86\x15\xac\xbb\xed\xbf%\xd8\xee)\x17\xaa\x0f\xaalR\x96\xe6!\xd7k\x02o\xffSE', 0x6)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat\x00')
fchdir(r0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xb00, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001fe, 0x82)

1m12.890997441s ago: executing program 36 (id=2735):
memfd_create(&(0x7f0000000000)='l2\xaa*\xaa\xaa\xabI\xf9\xbf\x83f|\xc3\x86\x15\xac\xbb\xed\xbf%\xd8\xee)\x17\xaa\x0f\xaalR\x96\xe6!\xd7k\x02o\xffSE', 0x6)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat\x00')
fchdir(r0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xb00, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001fe, 0x82)

54.732110927s ago: executing program 0 (id=2826):
add_key(&(0x7f0000000100)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xa8c5, 0xc000, 0x3, 0xfc})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)

53.689544754s ago: executing program 0 (id=2835):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000024c0)='net/udplite\x00')
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
socket$inet(0x2, 0x2, 0x200)
close_range(r0, 0xffffffffffffffff, 0x0)

51.311840202s ago: executing program 0 (id=2847):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xdddd1000, 0x1, 0x8, 0xc, 0xb, 0xe6, 0x40, 0x10, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x4, 0x5, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0x58000, 0x9, 0x26, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xffffffff, 0x3000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x4}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x9d, 0x81, 0x40, 0x70}, {0x804f000, 0x4000, 0x8, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x1, 0x30}, {0x8000000, 0x4}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x5000, 0x100c00, [0x6800000000000000, 0x4, 0x3, 0x8]})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0xb, 0x0, 0x5, 0x0, 0x5, 0x7f, 0x7f, 0x6, 0x8, 0x77, 0x5, 0x2, 0x0, 0xd, 0xd1, 0x7, 0x2, 0x6, 0xcb, '\x00', 0x5, 0x8})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x2, 0x0, @ioapic={0xeeee0000, 0xb, 0xba1, 0x8c5f, 0x0, [{0x46, 0x8, 0x1}, {0x2, 0x29, 0x6, '\x00', 0xf8}, {0x60, 0x3, 0x0, '\x00', 0xbd}, {0x7, 0x4, 0x9, '\x00', 0xd}, {0x5, 0x4, 0x8, '\x00', 0x5}, {0x3, 0x40, 0x71, '\x00', 0x2}, {0x7, 0x7, 0xfd, '\x00', 0x34}, {0x9, 0xc5, 0x1, '\x00', 0x5}, {0x7, 0xfb, 0x3, '\x00', 0x2}, {0xfe, 0x1, 0xd, '\x00', 0x4}, {0x1, 0x4e, 0x0, '\x00', 0x2}, {0x9, 0x2, 0x5, '\x00', 0x3}, {0xfa, 0x0, 0x8, '\x00', 0x7}, {0x80, 0x2, 0x80, '\x00', 0x4}, {0x6, 0x8, 0x3, '\x00', 0x4}, {0x9, 0xf1, 0x8, '\x00', 0x4}, {0x2, 0x7, 0x8, '\x00', 0x3}, {0x4, 0x6, 0x9, '\x00', 0x48}, {0x90, 0x0, 0x81, '\x00', 0x6}, {0xb, 0xff, 0x5}, {0x0, 0x4, 0x3, '\x00', 0x6a}, {0x7, 0x35, 0x7a, '\x00', 0x8}, {0x4, 0x7, 0x5, '\x00', 0xf}, {0x8, 0x2, 0x62, '\x00', 0x1}]}})

50.915233582s ago: executing program 0 (id=2850):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)

50.623641803s ago: executing program 0 (id=2852):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r3, 0xffff}, &(0x7f0000000080)=0xc)

50.359302864s ago: executing program 0 (id=2853):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0xffe)

50.0495122s ago: executing program 37 (id=2853):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0xffe)

30.463689553s ago: executing program 6 (id=2989):
r0 = fanotify_init(0x200, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0)
fanotify_mark(r0, 0x41, 0x8000038, r1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)

30.145040646s ago: executing program 6 (id=2992):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

30.003106178s ago: executing program 6 (id=2993):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x54000, 0x41000, 0x8, 0x9, 0x3, 0xd, 0x40, 0x9, 0x0, 0x2e, 0xfc}, {0x41000, 0x1, 0xf, 0x0, 0x40, 0x4, 0x7d, 0x4, 0x58, 0x1, 0x3}, {0xc000, 0x200000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0xb, 0x1, 0xab, 0x5, 0x85}, {0x6000, 0x26000, 0x3, 0x5d, 0x4, 0x5, 0x9, 0x8, 0x6, 0x7, 0xe}, {0x0, 0x9000, 0x1, 0x3, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x1000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x86, 0xfd}, {0x40000, 0x0, 0x4, 0x5, 0xe2, 0x2, 0x5, 0x0, 0x1, 0x82, 0xff, 0x70}, {0xd000, 0xdddd0000, 0xa, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x81, 0x7, 0xd}, {0x8000000, 0x5}, {0xf000, 0x86}, 0x80000031, 0x0, 0x8000000, 0x42004, 0xc, 0x0, 0xeeef0000, [0x6840000000000000, 0xd, 0x5e, 0x100]})

29.730429222s ago: executing program 6 (id=2996):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x126)

29.499739499s ago: executing program 6 (id=2998):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x2, 0x10}, {0xd, 0x4}, {0xe, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000808}, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000180)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x80000006}]})

27.442829551s ago: executing program 6 (id=3012):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224"], 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00')
fcntl$setstatus(r0, 0x4, 0x40800)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)

26.674346886s ago: executing program 38 (id=3012):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224"], 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00')
fcntl$setstatus(r0, 0x4, 0x40800)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)

3.790458466s ago: executing program 2 (id=3164):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x6, &(0x7f0000000000)=0xa636, 0x9, 0x0)

3.561123845s ago: executing program 2 (id=3167):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
shutdown(r0, 0x1)

3.061332986s ago: executing program 9 (id=3173):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0)
close(0x3)
r1 = inotify_init1(0x800)
inotify_add_watch(r1, &(0x7f0000005780)='./file0\x00', 0x9400002f)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0)

2.795780618s ago: executing program 2 (id=3178):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x48854)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg$unix(r2, &(0x7f000000a6c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x3, 0x0)

2.788744198s ago: executing program 9 (id=3179):
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00')
r1 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20)

2.601669304s ago: executing program 2 (id=3183):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
getpeername$qrtr(r0, 0x0, &(0x7f0000001040))
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)

2.58091332s ago: executing program 9 (id=3184):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0x20f})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000008c0)={0x2, 0x0, [{0x1, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffffc, 0x5, 0x920000000000, 0x4, 0x15ab}}, {0x9, 0x2, 0x0, 0x0, @adapter={0x4, 0x8000, 0x1c, 0x0, 0x5}}]})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000003c0)={"9e20ad3f2eb2bfb0030c156f3901b4dd432823a6080c3758e8fcd7754cfdcaeec9bbc7edaeaee7ae3314342394aeefba4c8d036dc35b80d681b31ae1c6f4780e61e635a5aedbb98db6d97bf6be3983a8299905ea5c69b3ed4e5ee5dc2caa62d33442b699063264d36be34b392faabf3a66865ce5e1877a3d31bb217653a47112913a64b2f19b0a9479992dd01c4760f4f8cda5273c0f1b95563c46e38990a1dd0667e7fc53b353f8b97b4e18c81b1cbf37736ca192cc648330b3f6858d424a4bfbe4ef67f8bb5c98c0280583b8dac6349b11a3f3c1279dab32e366722c8d6d1200b230bb45f70e6e25ef0beed3a030119d1cdd594fb560f9e8c12b9fb4c0b82cf0980b1de9353ee82246368ae7cbd34fccf7094424303c1bd616a879dde0ab0c72e05df6d89c2707c754b785ed337b8710d3c23905b3045c225c6f5a497b2f688d91b6c2c6b3f07bf7a05c00f1f84b3c3c67fa1f3d36d5bb893fdd6918bc6aa7c17f27d309cdeb12af9faecd61edd0bb5fd1e3f8947554365e31ac58662ca2d7535918d97335b31c271d68488db9bd9a152b44c56e6f1f70e505ffc72c49d25bb4ab90725325c64529c3b2d94d2873be75f119715ebbbccd433ad715c17b74e5e5b51e326eed1438df6ff7f6eebc20fb1acb0c98ffe73a7fa41e8368255365bfac5132a4333da479c2c1d96e4556a08bba59cfbb2b254dd7eaeee1480ed30ab2c48cd05c982302106417b628dc9f059c4266db84d325a51a4516afdf7ca429af93147a77c52e80f63153c92eb53ff9ffad691ce68433d0443c0239b965f437009db173fdf40201b4fe32f6e2c4b72e34c02cb16402f466b02bfbac716f2afaff197f8f1dc646430c14713cb4de64ba34968a3aeec1b87bd3c0e2b4e3f0f59cc076ab5ee66557d0d40ddfe4c73a2c201be5b53f4e7f22106ca9def6e33f4bf341433ec54ab0cbd8d25e3464e5a458f4352fe9ee460b59572a1895a6fe127cd333f8db7875574043360a75f6f98b1420e6f876ef83e45f881fcd580924c70a0481f01399b1c03bf65615fb5ac94c9ce4069cb3b91aa087f1f8727b3d28870d71bc4af2cc3c5dbef1b25b1a7b3f36f5a9c45b9c446a27ea008131ced43f2fbd65434a9a67ba42d8c5c136083b9e62d9b2d998c6f6bc2251fab2de2561de92a2f53348f00c5a9506d41c7b0bc3b355fbea762ad2aba37ce31ecccb499b9941dd88f66185943c437ac7f622c3b34d03611923bdea1a958a712c14f480128be8bf42277867a1176c7cac9339e464996ab4f3307d392d426995aead9c7706016f9d080d05dfe8dc8a872fa83d5e0380858662123b9d7ca10e00b5b456bdf713f66b06c9c76207ebe3383204dcd40debab76a168b7cd5c252eeb743f115063b8987cb03c35a196dd84a519ac3500"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.551400587s ago: executing program 8 (id=3185):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x90000005})
epoll_pwait(r2, &(0x7f0000000580)=[{}], 0x1, 0xfffeffff, 0x0, 0x0)
epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x101, 0x0, 0x0)
close(r0)

2.469344437s ago: executing program 4 (id=3186):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

2.337772722s ago: executing program 2 (id=3187):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xfffffe3e)

2.247611766s ago: executing program 4 (id=3189):
syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
r0 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x2dec, 0x800000, 0x40, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x5, 0x5, 0x4, 0xb, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x9, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x1, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x4, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0xb0, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x80000001, 0x9602, 0xa, 0x8, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0x10000fff]}, 0x45c)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r3, &(0x7f0000000040)="e2", 0x918)

2.230443316s ago: executing program 9 (id=3190):
openat$dlm_control(0xffffff9c, 0x0, 0x100, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de00000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ffd7000008"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

2.118823148s ago: executing program 8 (id=3192):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)

2.043068415s ago: executing program 4 (id=3193):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x0, 0x0)

1.946095961s ago: executing program 9 (id=3194):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x304e, 0x0, 0x3, 0xbfdffffc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}})
io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000200), 0x4)

1.836689097s ago: executing program 8 (id=3196):
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006440)=[{{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40040}}], 0x1, 0x8000)
r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r1 = dup(r0)
write$binfmt_elf32(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001000700080007000000000003"], 0x58)
r2 = fanotify_init(0x200, 0x0)
fanotify_mark(r2, 0x1, 0x40001004, r1, 0x0)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.693344649s ago: executing program 2 (id=3197):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x3, 0x3, 0x6})

1.652975917s ago: executing program 4 (id=3198):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r1 = epoll_create(0x3)
ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x5)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x10000000})

1.580252109s ago: executing program 8 (id=3199):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xd9}, {&(0x7f0000000240)=""/16, 0x10}], 0x2}, 0x3b83}], 0x1, 0x20011102, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)

1.275212053s ago: executing program 8 (id=3201):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

958.13442ms ago: executing program 3 (id=3202):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x1000, 0x4, 0xfffc, 0x9}, 'syz1\x00', 0x9})
ioctl$UI_DEV_CREATE(r0, 0x5501)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0)
r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000007c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2})
io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0)

912.252239ms ago: executing program 9 (id=3203):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000180)=ANY=[], 0x0)
syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f00000002c0)=ANY=[@ANYRES16])

912.038509ms ago: executing program 8 (id=3204):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0x8, 0x8, 0xfffc, 0xe, 0x2, 0x0, 0x80}, {0x5, 0x3, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x80000000000000, 0xfffffffffffffffe}, {0x400, 0x7, 0x0, 0x800}, 0x8, 0x0, 0x1, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x10000000, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0xffffffff, 0x2, 0x0, 0x0, 0xfffffffe, 0x1, 0xfffffffe}}, 0xe8)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x181440)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xffffffff})

693.613044ms ago: executing program 4 (id=3205):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x1)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0)={{0x80a0000, 0x10000, 0xc, 0x1, 0x81, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4}, {0x10000, 0x2000, 0xa, 0xfc, 0x0, 0x4, 0x0, 0x0, 0xe, 0x0, 0x4, 0xfc}, {0x3000, 0x8089000, 0x0, 0x1f, 0x0, 0x9, 0x0, 0x0, 0x80, 0x1, 0x43}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7, 0x5, 0x8}, {0xfec43000, 0xffff1000, 0x3, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0xb, 0x4}, {0x6000, 0x5000, 0xe, 0x0, 0x5, 0xfc, 0xfc, 0x0, 0x0, 0xb9, 0xc0}, {0x2, 0x8000000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0xb, 0x1a, 0x2, 0x8, 0x2}, {0x0, 0x0, 0x10, 0x2, 0x2, 0x7f, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0x1}, {}, 0x9df9ffdf, 0x0, 0x0, 0x20, 0x8, 0x8000, 0x2000, [0x4, 0x0, 0x800000000000006]})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50})

578.878255ms ago: executing program 3 (id=3206):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @timestamp, @sack_perm, @sack_perm], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)

427.750998ms ago: executing program 3 (id=3207):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {0x0}], 0x2}}], 0x1, 0x4000000)
sendto$inet(r0, &(0x7f0000000b00)="e81d", 0x2, 0x61, 0x0, 0x0)

380.826081ms ago: executing program 4 (id=3208):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
recvfrom(r0, &(0x7f0000000480)=""/110, 0xffffff41, 0x734, 0x0, 0xfffffffffffffecb)

380.629541ms ago: executing program 3 (id=3209):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

151.577371ms ago: executing program 3 (id=3210):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x2, 0x5e, 0x8000000000000000, 0x100000000000006, 0x3})

0s ago: executing program 3 (id=3211):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r0)
r1 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, r0)
socket$kcm(0x2, 0x3, 0x2)
syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x8, 0x10, 0xfa, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0x1c, 0x0, {0x7, 0x25, 0x1, 0xc, 0xb7, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x88, 0x21, 0x5, {0x7, 0x25, 0x1, 0x0, 0x7, 0x1}}}}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
keyctl$read(0xb, r1, &(0x7f0000001ec0)=""/4096, 0x1000)
write$tun(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  322.490177][ T5903] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  322.512522][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.539423][ T5903] hub 1-1:1.0: bad descriptor, ignoring hub
[  322.563177][ T5903] hub 1-1:1.0: probe with driver hub failed with error -5
[  322.582369][ T5903] cdc_wdm 1-1:1.0: skipping garbage
[  322.587630][ T5903] cdc_wdm 1-1:1.0: skipping garbage
[  322.608881][ T5903] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  322.874273][ T5835] usb 1-1: USB disconnect, device number 35
[  323.598368][ T5889] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  323.758585][ T5889] usb 2-1: Using ep0 maxpacket: 32
[  323.767926][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.782421][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  323.797002][ T5889] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  323.806675][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.819519][ T5889] usb 2-1: config 0 descriptor??
[  323.829669][ T5889] hub 2-1:0.0: USB hub found
[  324.032432][ T5889] hub 2-1:0.0: 1 port detected
[  324.449360][T11985] veth0: entered promiscuous mode
[  324.456109][T11985] bond0: entered promiscuous mode
[  324.461704][T11985] bond_slave_0: entered promiscuous mode
[  324.467776][T11985] bond_slave_1: entered promiscuous mode
[  324.475202][T11984] bond0: left promiscuous mode
[  324.480692][T11984] bond_slave_0: left promiscuous mode
[  324.486498][T11984] bond_slave_1: left promiscuous mode
[  324.506177][ T5931] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  324.515196][T11984] veth0: left promiscuous mode
[  324.638425][ T5835] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  324.648002][ T5889] hub 2-1:0.0: activate --> -90
[  324.686496][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  324.698852][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.710361][ T5931] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  324.721573][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.734866][ T5931] usb 3-1: config 0 descriptor??
[  324.751132][ T5931] hub 3-1:0.0: USB hub found
[  324.809873][ T5835] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  324.828744][ T5835] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253
[  324.875503][ T5835] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  324.888638][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.907517][ T5835] usb 1-1: Product: syz
[  324.918299][ T5835] usb 1-1: Manufacturer: syz
[  324.923076][ T5835] usb 1-1: SerialNumber: syz
[  324.939223][ T5835] usb 1-1: config 0 descriptor??
[  324.954039][ T5931] hub 3-1:0.0: 1 port detected
[  324.971493][ T5835] gspca_main: sunplus-2.14.0 probing 055f:c630
[  325.058862][ T5903] usb 2-1: USB disconnect, device number 34
[  325.561815][ T5931] hub 3-1:0.0: activate --> -90
[  325.973422][ T5931] usb 3-1-port1: config error
[  325.978936][ T5834] usb 3-1: USB disconnect, device number 27
[  326.377975][ T5835] gspca_sunplus: reg_r err -71
[  326.383507][ T5835] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  326.410728][ T5835] usb 1-1: USB disconnect, device number 36
[  326.595672][T12018] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  326.718317][ T5903] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  326.959141][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  327.001844][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  327.042054][ T5903] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  327.058326][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.090452][ T5903] usb 2-1: config 0 descriptor??
[  327.245681][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2351'.
[  327.524007][ T5903] pyra 0003:1E7D:2CF6.002F: item fetching failed at offset 0/7
[  327.544947][ T5903] pyra 0003:1E7D:2CF6.002F: parse failed
[  327.565350][ T5903] pyra 0003:1E7D:2CF6.002F: probe with driver pyra failed with error -22
[  327.878474][ T5903] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  328.054047][ T5903] usb 4-1: config 0 has no interfaces?
[  328.075368][ T5903] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  328.092632][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.111192][ T5903] usb 4-1: Product: syz
[  328.121057][ T5903] usb 4-1: Manufacturer: syz
[  328.129493][ T5903] usb 4-1: SerialNumber: syz
[  328.149729][ T5903] usb 4-1: config 0 descriptor??
[  328.291443][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  328.302870][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  328.310965][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  328.330733][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  328.340845][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  328.454701][ T5903] usb 4-1: USB disconnect, device number 45
[  328.724171][T12060] chnl_net:caif_netlink_parms(): no params data found
[  328.852251][T12060] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.868681][T12060] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.875972][T12060] bridge_slave_0: entered allmulticast mode
[  328.889609][T12060] bridge_slave_0: entered promiscuous mode
[  328.901148][T12060] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.924778][T12060] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.934362][T12060] bridge_slave_1: entered allmulticast mode
[  328.951416][T12060] bridge_slave_1: entered promiscuous mode
[  329.302699][T12060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.365018][T12060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.482264][T12060] team0: Port device team_slave_0 added
[  329.544146][ T5931] usb 2-1: USB disconnect, device number 35
[  329.565597][T12060] team0: Port device team_slave_1 added
[  329.725160][T12060] batman_adv: batadv0: Adding interface: batadv_slave_0
[  329.749369][T12060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  329.808431][T12060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  329.853124][T12060] batman_adv: batadv0: Adding interface: batadv_slave_1
[  329.871406][T12060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  329.938561][T12060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  330.152460][T12060] hsr_slave_0: entered promiscuous mode
[  330.177035][T12060] hsr_slave_1: entered promiscuous mode
[  330.200575][T12060] debugfs: 'hsr0' already exists in 'hsr'
[  330.226792][T12060] Cannot create hsr debugfs directory
[  330.378361][ T5827] Bluetooth: hci3: command tx timeout
[  330.851862][T12060] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  330.898655][T12060] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  330.923070][T12060] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  330.953574][T12060] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  331.324354][T12060] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.367815][T12060] 8021q: adding VLAN 0 to HW filter on device team0
[  331.415872][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.423099][ T6338] bridge0: port 1(bridge_slave_0) entered forwarding state
[  331.493584][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.500833][ T6338] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.644162][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2383'.
[  331.718995][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2383'.
[  331.773399][T12060] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.970367][T12060] veth0_vlan: entered promiscuous mode
[  332.010925][T12060] veth1_vlan: entered promiscuous mode
[  332.067037][T12060] veth0_macvtap: entered promiscuous mode
[  332.079420][T12060] veth1_macvtap: entered promiscuous mode
[  332.111768][T12060] batman_adv: batadv0: Interface activated: batadv_slave_0
[  332.136917][T12060] batman_adv: batadv0: Interface activated: batadv_slave_1
[  332.179033][ T1017] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  332.214757][ T1017] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  332.248308][ T1017] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  332.257468][ T1017] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  332.457202][   T29] audit: type=1326 audit(1774357179.029:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf419c799 code=0x7fc00000
[  332.482229][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.498281][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.501288][ T5827] Bluetooth: hci3: command tx timeout
[  332.535286][   T29] audit: type=1326 audit(1774357179.029:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2bf419c799 code=0x7fc00000
[  332.710500][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  332.728436][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  332.736473][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  332.759816][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  332.778811][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  332.811436][ T6338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.881602][ T6338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  333.289314][T12145] chnl_net:caif_netlink_parms(): no params data found
[  333.333152][T12153] netlink: 212344 bytes leftover after parsing attributes in process `syz.6.2359'.
[  333.693812][T12145] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.759024][T12145] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.766337][T12145] bridge_slave_0: entered allmulticast mode
[  333.774960][T12145] bridge_slave_0: entered promiscuous mode
[  333.784595][T12145] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.794621][T12145] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.802279][T12145] bridge_slave_1: entered allmulticast mode
[  333.808535][ T5931] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  333.814271][T12145] bridge_slave_1: entered promiscuous mode
[  333.857275][T12145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  333.874895][T12145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.028464][ T5931] usb 7-1: Using ep0 maxpacket: 32
[  334.035888][ T5931] usb 7-1: config 0 has an invalid interface number: 188 but max is 0
[  334.044276][ T5931] usb 7-1: config 0 has no interface number 0
[  334.052422][ T5931] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  334.054668][T12145] team0: Port device team_slave_0 added
[  334.106657][ T5931] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  334.126153][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.148300][ T5931] usb 7-1: Product: syz
[  334.164094][ T5931] usb 7-1: Manufacturer: syz
[  334.172202][T12145] team0: Port device team_slave_1 added
[  334.179146][ T5931] usb 7-1: SerialNumber: syz
[  334.201392][ T5931] usb 7-1: config 0 descriptor??
[  334.217484][T12163] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  334.288438][T12145] batman_adv: batadv0: Adding interface: batadv_slave_0
[  334.295434][T12145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  334.402119][T12145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  334.449006][T12163] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  334.466056][T12145] batman_adv: batadv0: Adding interface: batadv_slave_1
[  334.488231][T12145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  334.538261][ T5832] Bluetooth: hci3: command tx timeout
[  334.566897][T12145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  334.855777][T12145] hsr_slave_0: entered promiscuous mode
[  334.860390][ T5834] syzkaller1: tun_net_xmit 90
[  334.866510][ T5832] Bluetooth: hci0: command tx timeout
[  334.879854][T12145] hsr_slave_1: entered promiscuous mode
[  334.886382][T12145] debugfs: 'hsr0' already exists in 'hsr'
[  334.898339][T12145] Cannot create hsr debugfs directory
[  334.904102][T12180] syzkaller1: tun_chr_ioctl cmd 1074025677
[  334.921608][T12180] syzkaller1: Linktype set failed because interface is up
[  335.480572][T12145] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  335.495321][T12145] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  335.538921][T12145] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  335.574334][T12145] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  335.720776][ T5931] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  335.757491][ T5931] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9
[  335.839677][ T5931] asix 7-1:0.188: probe with driver asix failed with error -71
[  335.898941][ T5931] usb 7-1: USB disconnect, device number 2
[  335.911025][T12145] 8021q: adding VLAN 0 to HW filter on device bond0
[  335.982031][T12145] 8021q: adding VLAN 0 to HW filter on device team0
[  336.033514][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.040716][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.093857][   T73] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.101055][   T73] bridge0: port 2(bridge_slave_1) entered forwarding state
[  336.159354][T12211] fuse: Bad value for 'fd'
[  336.298347][ T5931] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  336.421895][T12145] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.437872][T12217] fuse: Bad value for 'fd'
[  336.489149][ T5931] usb 4-1: Using ep0 maxpacket: 32
[  336.505968][ T5931] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  336.530619][ T5931] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  336.560556][ T5931] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  336.578433][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  336.588610][T12145] veth0_vlan: entered promiscuous mode
[  336.606533][ T5931] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  336.619154][ T5832] Bluetooth: hci3: command tx timeout
[  336.633428][T12145] veth1_vlan: entered promiscuous mode
[  336.641234][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  336.673503][ T5931] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  336.687977][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.697704][ T5835] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  336.708790][T12145] veth0_macvtap: entered promiscuous mode
[  336.723425][T12145] veth1_macvtap: entered promiscuous mode
[  336.729921][ T5931] usb 4-1: config 0 descriptor??
[  336.756935][T12145] batman_adv: batadv0: Interface activated: batadv_slave_0
[  336.776714][T12145] batman_adv: batadv0: Interface activated: batadv_slave_1
[  336.805889][ T1005] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.816004][ T1005] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.831074][ T1005] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.840501][ T1005] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.860905][ T5835] usb 1-1: Using ep0 maxpacket: 8
[  336.879286][ T5835] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  336.904578][ T5835] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  336.918951][ T5835] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  336.934796][ T5835] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  336.949143][ T5832] Bluetooth: hci0: command tx timeout
[  336.984827][ T5931] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  336.998867][ T5835] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  337.028816][ T5835] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  337.038074][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.050804][ T5931] usb 4-1: USB disconnect, device number 46
[  337.080942][ T5931] usblp0: removed
[  337.097883][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.155158][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.224480][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.233041][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.274752][ T5835] usb 1-1: usb_control_msg returned -32
[  337.281679][ T5835] usbtmc 1-1:16.0: can't read capabilities
[  337.528292][ T5931] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  337.622719][T12215] usbtmc 1-1:16.0: usb_control_msg returned -71
[  337.625882][ T5835] usb 1-1: USB disconnect, device number 37
[  337.649443][T12237] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -19
[  337.688262][ T5931] usb 4-1: Using ep0 maxpacket: 32
[  337.711417][ T5931] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  337.736052][ T5931] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  337.766786][ T5931] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  337.782117][T12241] loop9: detected capacity change from 0 to 7
[  337.799274][ T5987] Dev loop9: unable to read RDB block 7
[  337.807715][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  337.819139][ T5987]  loop9: unable to read partition table
[  337.825095][ T5987] loop9: partition table beyond EOD, truncated
[  337.837575][ T5931] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  337.867165][T12241] Dev loop9: unable to read RDB block 7
[  337.878244][T12241]  loop9: unable to read partition table
[  337.885907][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  337.909964][T12241] loop9: partition table beyond EOD, truncated
[  337.933792][ T5931] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  337.943244][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.955389][T12241] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  337.984714][ T5931] usb 4-1: config 0 descriptor??
[  338.240122][ T5931] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  338.865099][ T5931] usb 4-1: USB disconnect, device number 47
[  338.909987][ T5931] usblp0: removed
[  338.922442][T12264] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2435'.
[  339.018666][ T5827] Bluetooth: hci0: command tx timeout
[  339.738614][ T5827] Bluetooth: hci1: command 0x0406 tx timeout
[  340.105081][T12295] syz.3.2448 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  340.253667][T12299] netlink: 'syz.7.2449': attribute type 1 has an invalid length.
[  340.284135][T12299] macvlan0: entered promiscuous mode
[  341.028413][   T29] audit: type=1326 audit(1774357187.619:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12311 comm="syz.0.2455" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3839d9c799 code=0x0
[  341.098545][ T5832] Bluetooth: hci0: command tx timeout
[  341.470068][T12322] xt_hashlimit: size too large, truncated to 1048576
[  341.965778][T12337] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2463'.
[  341.976503][T12337] netlink: Conntrack attr type has unexpected length (type=4, length=0, expected=32)
[  342.159776][T12345] tap0: tun_chr_ioctl cmd 1074025677
[  342.183464][T12345] tap0: linktype set to 774
[  342.203416][T12345] tap0: tun_chr_ioctl cmd 1074025672
[  342.223416][T12345] tap0: ignored: set checksum enabled
[  342.245936][T12348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2467'.
[  342.260610][T12345] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2465'.
[  343.368274][ T5889] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  343.489490][ T5929] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  343.531000][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.577381][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  343.608362][ T5889] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  343.617473][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.649927][ T5929] usb 8-1: Using ep0 maxpacket: 32
[  343.675852][ T5889] usb 4-1: config 0 descriptor??
[  343.685436][ T5929] usb 8-1: config 0 has an invalid interface number: 89 but max is 0
[  343.704289][ T5929] usb 8-1: config 0 has no interface number 0
[  343.718535][ T5929] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  343.750351][ T5929] usb 8-1: config 0 interface 89 has no altsetting 0
[  343.778545][ T5929] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  343.799966][ T5929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.808038][ T5929] usb 8-1: Product: syz
[  343.828984][ T5929] usb 8-1: Manufacturer: syz
[  343.858492][ T5929] usb 8-1: SerialNumber: syz
[  343.889704][ T5929] usb 8-1: config 0 descriptor??
[  343.922539][ T5929] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  343.953018][ T5929] em28xx 8-1:0.89: Video interface 89 found:
[  344.104354][ T5889] cm6533_jd 0003:0D8C:0022.0030: unknown main item tag 0x0
[  344.126223][ T5889] cm6533_jd 0003:0D8C:0022.0030: unknown main item tag 0x0
[  344.172810][ T5889] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0030/input/input39
[  344.228953][ T5889] cm6533_jd 0003:0D8C:0022.0030: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[  344.343524][    T9] usb 4-1: USB disconnect, device number 48
[  344.407053][T12381] fuse: Bad value for 'fd'
[  344.535390][T12379] fido_id[12379]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  344.559176][ T5929] em28xx 8-1:0.89: unknown em28xx chip ID (0)
[  344.885943][   T29] audit: type=1326 audit(1774357191.469:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.6.2478" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0022d9c799 code=0x0
[  344.988268][ T5929] em28xx 8-1:0.89: AC97 command still being executed: not handled properly!
[  345.148085][T12396] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2485'.
[  345.175761][ T5929] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  345.214558][ T5929] em28xx 8-1:0.89: board has no eeprom
[  345.288330][ T5929] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67)
[  345.307560][ T5929] em28xx 8-1:0.89: analog set to bulk mode.
[  345.344875][  T796] em28xx 8-1:0.89: Registering V4L2 extension
[  345.383039][ T5929] usb 8-1: USB disconnect, device number 2
[  345.412672][ T5929] em28xx 8-1:0.89: Disconnecting em28xx
[  345.465973][  T796] em28xx 8-1:0.89: Config register raw data: 0xffffffed
[  345.501593][  T796] em28xx 8-1:0.89: AC97 chip type couldn't be determined
[  345.523515][  T796] em28xx 8-1:0.89: No AC97 audio processor
[  345.551080][  T796] usb 8-1: Decoder not found
[  345.580228][  T796] em28xx 8-1:0.89: failed to create media graph
[  345.586594][  T796] em28xx 8-1:0.89: V4L2 device video103 deregistered
[  345.617641][  T796] em28xx 8-1:0.89: Registering snapshot button...
[  345.644134][  T796] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input40
[  345.686115][  T796] em28xx 8-1:0.89: Remote control support is not available for this card.
[  345.718300][ T5929] em28xx 8-1:0.89: Closing input extension
[  345.746674][ T5929] em28xx 8-1:0.89: Deregistering snapshot button
[  345.884729][ T5929] em28xx 8-1:0.89: Freeing device
[  346.230754][T12421] fuse: Bad value for 'fd'
[  346.420443][    T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  346.472319][T12431] tipc: Started in network mode
[  346.477629][T12431] tipc: Node identity 5, cluster identity 3
[  346.484436][T12431] tipc: Node number set to 5
[  346.536268][T12433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  346.582679][    T9] usb 4-1: Using ep0 maxpacket: 16
[  346.600276][    T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  346.625690][    T9] usb 4-1: config 0 has no interface number 0
[  346.652468][    T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  346.684164][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.699916][    T9] usb 4-1: Product: syz
[  346.717426][    T9] usb 4-1: Manufacturer: syz
[  346.733349][    T9] usb 4-1: SerialNumber: syz
[  346.760943][    T9] usb 4-1: config 0 descriptor??
[  346.786001][    T9] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  346.903832][T12449] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2506'.
[  346.918296][T12449] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2506'.
[  346.998781][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2508'.
[  347.050485][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2508'.
[  347.821547][    T9] gspca_spca1528: reg_w err -71
[  347.838863][    T9] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71
[  347.891082][    T9] usb 4-1: USB disconnect, device number 49
[  347.975367][T12478] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2520'.
[  347.991981][T12478] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2520'.
[  348.046935][  T796] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  348.221112][  T796] usb 8-1: Using ep0 maxpacket: 16
[  348.236991][  T796] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  348.270316][  T796] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  348.312251][  T796] usb 8-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  348.335671][  T796] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.354137][  T796] usb 8-1: config 0 descriptor??
[  348.662652][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2529'.
[  348.702148][T12498] team1: entered promiscuous mode
[  348.707405][T12498] team1: entered allmulticast mode
[  348.728635][T12498] 8021q: adding VLAN 0 to HW filter on device team1
[  348.734943][T12501] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2529'.
[  348.798477][T12501] team2: entered promiscuous mode
[  348.801345][  T796] kye 0003:0458:5016.0031: control desc unexpectedly large
[  348.803934][T12501] team2: entered allmulticast mode
[  348.819451][T12501] 8021q: adding VLAN 0 to HW filter on device team2
[  348.829131][  T796] input: HID 0458:5016 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5016.0031/input/input41
[  348.840725][ T5929] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  348.950818][  T796] input: HID 0458:5016 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5016.0031/input/input42
[  349.008638][ T5929] usb 1-1: Using ep0 maxpacket: 32
[  349.027135][ T5929] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  349.083440][  T796] kye 0003:0458:5016.0031: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.7-1/input0
[  349.123772][ T5929] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  349.133169][T12511] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2534'.
[  349.163788][ T5929] usb 1-1: config 0 interface 0 has no altsetting 0
[  349.187678][ T5929] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  349.198440][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.224082][ T5929] usb 1-1: Product: syz
[  349.228406][ T5929] usb 1-1: Manufacturer: syz
[  349.233128][ T5929] usb 1-1: SerialNumber: syz
[  349.251208][ T5929] usb 1-1: config 0 descriptor??
[  349.395726][    T9] usb 8-1: USB disconnect, device number 3
[  349.618340][ T5889] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  349.671607][ T5929] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  349.780079][ T5889] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  349.793802][ T5889] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  349.805646][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.814047][ T5889] usb 4-1: Product: syz
[  349.821553][ T5889] usb 4-1: Manufacturer: syz
[  349.827944][ T5889] usb 4-1: SerialNumber: syz
[  350.233793][   T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  350.293981][    T9] usb 1-1: USB disconnect, device number 38
[  350.400087][   T10] usb 8-1: Using ep0 maxpacket: 16
[  350.413816][   T10] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  350.434837][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  350.446214][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  350.458570][   T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  350.474512][   T10] usb 8-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  350.484489][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.498662][   T10] usb 8-1: config 0 descriptor??
[  350.872621][ T5889] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[  350.882163][ T5889] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  350.915284][ T5889] cdc_ncm 4-1:1.0: setting rx_max = 2048
[  350.974609][   T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5013.0032/input/input43
[  351.164888][   T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5013.0032/input/input44
[  351.258876][   T10] kye 0003:0458:5013.0032: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.7-1/input0
[  351.317360][ T5889] cdc_ncm 4-1:1.0: setting tx_max = 88
[  351.339199][   T10] usb 8-1: USB disconnect, device number 4
[  351.372616][ T5889] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  351.447053][ T5889] usb 4-1: USB disconnect, device number 50
[  351.490507][ T5889] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP)
[  351.492103][T12553] fido_id[12553]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory
[  351.572522][ T5929] IPVS: starting estimator thread 0...
[  351.726149][T12559] IPVS: using max 24 ests per chain, 57600 per kthread
[  351.788733][T12562] __nla_validate_parse: 1 callbacks suppressed
[  351.788773][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2549'.
[  351.844783][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2549'.
[  352.071660][T12566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  352.778328][   T29] audit: type=1804 audit(1774357199.359:142): pid=12596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2557" name="/newroot/23/file1" dev="tmpfs" ino=136 res=1 errno=0
[  353.044917][T12607] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.2562'.
[  353.668277][ T5889] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  353.825314][ T5889] usb 4-1: config 0 has no interfaces?
[  353.858587][ T5889] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  353.869340][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.891377][ T5889] usb 4-1: config 0 descriptor??
[  354.144197][   T10] usb 4-1: USB disconnect, device number 51
[  355.358270][   T29] audit: type=1804 audit(1774357201.929:143): pid=12658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2581" name="bus" dev="ramfs" ino=44020 res=1 errno=0
[  355.679146][T12670] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2585'.
[  355.815122][T12674] fuse: Bad value for 'fd'
[  355.829534][T12676] syzkaller1: entered promiscuous mode
[  355.836620][T12676] syzkaller1: entered allmulticast mode
[  355.899882][ T5929] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  356.070084][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  356.090389][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  356.114260][ T5929] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  356.124753][ T5929] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  356.134075][ T5929] usb 4-1: Manufacturer: syz
[  356.155480][ T5929] usb 4-1: config 0 descriptor??
[  356.593081][ T5929] pyra 0003:1E7D:2CF6.0033: unknown main item tag 0x0
[  356.603665][ T5929] pyra 0003:1E7D:2CF6.0033: unknown main item tag 0x0
[  356.612168][ T5929] pyra 0003:1E7D:2CF6.0033: unknown main item tag 0x0
[  356.620504][ T5929] pyra 0003:1E7D:2CF6.0033: unknown main item tag 0x0
[  356.627468][ T5929] pyra 0003:1E7D:2CF6.0033: unknown main item tag 0x0
[  356.634827][ T5929] pyra 0003:1E7D:2CF6.0033: unknown main item tag 0x0
[  356.645783][ T5929] pyra 0003:1E7D:2CF6.0033: unknown main item tag 0x0
[  356.656520][ T5929] pyra 0003:1E7D:2CF6.0033: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  357.586749][T12716] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.594671][T12716] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.609388][ T5929] pyra 0003:1E7D:2CF6.0033: couldn't init struct pyra_device
[  357.637127][ T5929] pyra 0003:1E7D:2CF6.0033: couldn't install mouse
[  357.660106][ T5929] pyra 0003:1E7D:2CF6.0033: probe with driver pyra failed with error -71
[  357.692476][ T5929] usb 4-1: USB disconnect, device number 52
[  357.812765][T12732] fido_id[12732]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  357.985521][T12716] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  358.059882][T12716] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  358.245976][T12716] macvlan0: left promiscuous mode
[  358.921752][T12758] netlink: 'syz.6.2615': attribute type 1 has an invalid length.
[  358.957119][   T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.994320][   T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  359.088265][   T12] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  359.186655][   T12] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  359.308547][T12765] netlink: 'syz.7.2618': attribute type 4 has an invalid length.
[  359.330490][T12762] bond1: (slave geneve2): making interface the new active one
[  359.386085][T12762] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  359.467420][   T12] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  359.518249][   T12] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  359.581091][   T12] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  359.617668][   T12] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  359.824744][T12776] fuse: Bad value for 'fd'
[  360.995461][T12815] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2639'.
[  361.071424][ T5922] usb 8-1: new low-speed USB device number 5 using dummy_hcd
[  361.250395][ T5922] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  361.272682][ T5922] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  361.316148][ T5922] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  361.351930][ T5922] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  361.395364][ T5922] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  361.442435][ T5922] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  361.454115][ T5922] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  361.477444][ T5922] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  361.509288][ T5922] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  361.542681][ T5922] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  361.575420][ T5922] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  361.583390][ T5922] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  361.602911][ T5922] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  361.618910][T12737] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  361.651853][ T5922] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  361.680969][ T5922] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  361.720193][ T5922] usb 8-1: string descriptor 0 read error: -22
[  361.726876][ T5922] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  361.759675][ T5922] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.791909][T12737] usb 1-1: config 1 interface 0 has no altsetting 0
[  361.806975][ T5922] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  361.831385][T12737] usb 1-1: string descriptor 0 read error: -22
[  361.837853][T12737] usb 1-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.40
[  361.889357][T12737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.127770][ T5922] usb 8-1: USB disconnect, device number 5
[  362.480012][T12737] razer 0003:1532:010D.0034: unknown main item tag 0x0
[  362.498250][T12737] razer 0003:1532:010D.0034: unknown main item tag 0x0
[  362.513066][T12737] razer 0003:1532:010D.0034: unknown main item tag 0x0
[  362.526843][T12737] razer 0003:1532:010D.0034: unknown main item tag 0x0
[  362.544462][T12737] razer 0003:1532:010D.0034: unknown main item tag 0x0
[  362.558472][T12737] razer 0003:1532:010D.0034: unknown main item tag 0x0
[  362.568275][ T5882] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  362.586175][T12737] razer 0003:1532:010D.0034: unknown main item tag 0x0
[  362.594230][T12737] razer 0003:1532:010D.0034: unknown main item tag 0x0
[  362.614591][T12737] razer 0003:1532:010D.0034: unknown main item tag 0x0
[  362.638277][T12737] razer 0003:1532:010D.0034: unknown main item tag 0x0
[  362.748343][ T5882] usb 7-1: Using ep0 maxpacket: 32
[  362.776763][T12737] razer 0003:1532:010D.0034: hidraw0: USB HID vff.7f Device [HID 1532:010d] on usb-dummy_hcd.0-1/input0
[  362.788309][ T5882] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  362.808243][ T5882] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  362.816902][ T5882] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  362.858680][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  362.878266][ T5882] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  362.888021][ T5882] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  362.928243][ T5882] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  362.943642][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.969359][ T5882] usb 7-1: config 0 descriptor??
[  363.020925][T12737] usb 1-1: USB disconnect, device number 39
[  363.224648][ T5882] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  363.277449][ T5882] usb 7-1: USB disconnect, device number 3
[  363.287471][ T5882] usblp0: removed
[  363.438249][ T5922] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  363.618228][ T5922] usb 4-1: Using ep0 maxpacket: 32
[  363.630183][ T5922] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  363.675037][ T5922] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  363.704464][ T5922] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  363.723361][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  363.735321][ T5922] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  363.745593][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  363.761192][ T5922] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  363.774053][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.788282][ T5882] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  363.795010][ T5922] usb 4-1: config 0 descriptor??
[  363.960481][ T5882] usb 7-1: Using ep0 maxpacket: 32
[  363.968125][ T5882] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  363.980365][ T5882] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  364.008186][ T5882] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  364.025468][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  364.051087][ T5882] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  364.069772][ T5922] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  364.091517][ T5882] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  364.130859][ T5922] usb 4-1: USB disconnect, device number 53
[  364.150618][ T5882] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  364.171803][ T5922] usblp0: removed
[  364.182337][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.213813][ T5882] usb 7-1: config 0 descriptor??
[  364.239427][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2654'.
[  364.301571][T12856] macvtap1: entered promiscuous mode
[  364.306930][T12856] erspan0: entered promiscuous mode
[  364.318559][T12856] macvtap1: entered allmulticast mode
[  364.328495][T12856] erspan0: entered allmulticast mode
[  364.364627][T12858] erspan0: left allmulticast mode
[  364.373419][T12858] erspan0: left promiscuous mode
[  364.445086][ T5882] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  364.578261][ T5922] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  364.728331][ T5922] usb 4-1: Using ep0 maxpacket: 32
[  364.740736][ T5922] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  364.755830][ T5922] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  364.775666][ T5922] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  364.795352][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  364.817656][ T5922] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  364.839427][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  364.869370][ T5922] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  364.889925][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.917609][ T5922] usb 4-1: config 0 descriptor??
[  365.000100][ T5834] usb 7-1: USB disconnect, device number 4
[  365.023252][ T5834] usblp0: removed
[  365.139768][ T5922] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  365.478277][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  365.500130][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  365.511056][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  365.519817][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  365.539897][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  365.553128][   T12] bridge_slave_1: left allmulticast mode
[  365.559754][   T12] bridge_slave_1: left promiscuous mode
[  365.565572][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.613770][   T12] bridge_slave_0: left allmulticast mode
[  365.657279][   T12] bridge_slave_0: left promiscuous mode
[  365.690555][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.693647][ T5882] usb 4-1: USB disconnect, device number 54
[  365.718269][ T5882] usblp0: removed
[  366.380444][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  366.399920][T12737] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  366.423260][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  366.443531][T12899] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2667'.
[  366.463437][   T12] bond0 (unregistering): Released all slaves
[  366.588659][T12737] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  366.618182][T12737] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  366.636259][T12737] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  366.669188][T12737] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.715915][T12737] usb 7-1: config 0 descriptor??
[  366.959502][ T5882] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  367.150926][ T5882] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  367.174276][ T5882] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  367.195753][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  367.204728][ T5882] usb 1-1: Product: syz
[  367.214823][ T5882] usb 1-1: Manufacturer: syz
[  367.219920][ T5882] usb 1-1: SerialNumber: syz
[  367.253779][T12737] hid-steam 0003:28DE:1142.0035: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0
[  367.297421][   T12] hsr_slave_0: left promiscuous mode
[  367.324444][   T12] hsr_slave_1: left promiscuous mode
[  367.334989][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  367.355926][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  367.402970][T12737] usb 7-1: USB disconnect, device number 5
[  367.436794][T12919] fido_id[12919]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  367.469921][ T5882] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  367.482343][T12922] fuse: Bad value for 'fd'
[  367.658373][ T5827] Bluetooth: hci0: command tx timeout
[  367.732796][   T12] team0 (unregistering): Port device team_slave_1 removed
[  367.758532][   T12] team0 (unregistering): Port device team_slave_0 removed
[  368.102534][T12940] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2680'.
[  368.161170][T12940] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.179987][T12942] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2680'.
[  368.285212][T12876] chnl_net:caif_netlink_parms(): no params data found
[  368.452117][T12946] pim6reg1: entered allmulticast mode
[  368.648391][T12719] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  368.734506][T12876] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.748822][T12876] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.773422][T12876] bridge_slave_0: entered allmulticast mode
[  368.803023][T12876] bridge_slave_0: entered promiscuous mode
[  368.811535][T12719] usb 4-1: Using ep0 maxpacket: 32
[  368.825152][T12876] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.834525][T12876] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.848763][T12719] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  368.868434][T12719] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  368.871053][T12876] bridge_slave_1: entered allmulticast mode
[  368.877381][T12719] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  368.891995][T12876] bridge_slave_1: entered promiscuous mode
[  368.905059][T12965] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 4294967272. macoff=96
[  368.916262][T12719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  368.936889][T12719] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  368.968231][T12719] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  369.017377][T12719] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  369.029838][T12876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  369.064182][T12876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  369.071783][T12719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.112065][T12719] usb 4-1: config 0 descriptor??
[  369.182636][    C1] usblp0: nonzero write bulk status received: -71
[  369.185417][ T5882] usb 1-1: USB disconnect, device number 40
[  369.202117][T12876] team0: Port device team_slave_0 added
[  369.215373][ T5882] usblp0: removed
[  369.224397][T12876] team0: Port device team_slave_1 added
[  369.337991][T12876] batman_adv: batadv0: Adding interface: batadv_slave_0
[  369.364033][T12876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  369.391565][T12719] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  369.437623][T12876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  369.465232][T12876] batman_adv: batadv0: Adding interface: batadv_slave_1
[  369.469002][T12719] usb 4-1: USB disconnect, device number 55
[  369.483232][T12876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  369.529078][T12719] usblp0: removed
[  369.556544][T12876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  369.725754][T12876] hsr_slave_0: entered promiscuous mode
[  369.732702][T12876] hsr_slave_1: entered promiscuous mode
[  369.738548][ T5827] Bluetooth: hci0: command tx timeout
[  369.769080][T12876] debugfs: 'hsr0' already exists in 'hsr'
[  369.798230][T12876] Cannot create hsr debugfs directory
[  369.918366][T12719] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  370.078318][T12719] usb 4-1: Using ep0 maxpacket: 32
[  370.100644][T12719] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  370.112299][T12719] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  370.146063][T12719] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  370.183531][T12719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  370.216415][T12719] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  370.236659][T12719] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  370.268566][T12719] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  370.292524][T12719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.333268][T12719] usb 4-1: config 0 descriptor??
[  370.544157][T12876] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  370.587204][T12719] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  370.623505][T12876] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  370.653708][T12876] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  370.676119][T12876] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  370.808816][ T5882] usb 4-1: USB disconnect, device number 56
[  370.824801][ T5882] usblp0: removed
[  370.881777][T12876] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.914344][T12876] 8021q: adding VLAN 0 to HW filter on device team0
[  370.927886][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.935152][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[  370.976770][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.983994][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.080005][T12736] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  371.138011][T12876] 8021q: adding VLAN 0 to HW filter on device batadv0
[  371.241336][T12736] usb 1-1: Using ep0 maxpacket: 32
[  371.253344][T12736] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  371.282302][T12736] usb 1-1: config 0 has no interface number 0
[  371.300846][T12736] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  371.320439][T12876] veth0_vlan: entered promiscuous mode
[  371.360488][T12876] veth1_vlan: entered promiscuous mode
[  371.368268][T12736] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  371.391979][T12736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.437283][T12736] usb 1-1: Product: syz
[  371.443935][T12736] usb 1-1: Manufacturer: syz
[  371.468303][T12736] usb 1-1: SerialNumber: syz
[  371.495958][T12736] usb 1-1: config 0 descriptor??
[  371.522569][T12876] veth0_macvtap: entered promiscuous mode
[  371.527333][T12736] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  371.558421][T12736] em28xx 1-1:0.132: Video interface 132 found:
[  371.585277][T12876] veth1_macvtap: entered promiscuous mode
[  371.652407][T12876] batman_adv: batadv0: Interface activated: batadv_slave_0
[  371.681280][T12876] batman_adv: batadv0: Interface activated: batadv_slave_1
[  371.707755][   T82] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  371.729533][   T82] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  371.742275][   T82] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  371.779202][   T82] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  371.818616][ T5827] Bluetooth: hci0: command tx timeout
[  371.966031][T12736] em28xx 1-1:0.132: chip ID is em2874
[  372.202043][   T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.236032][   T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.276899][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2711'.
[  372.381878][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.397801][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.525990][   T82] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.568247][   T82] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.570533][T12736] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  372.623864][T12736] em28xx 1-1:0.132: board has no eeprom
[  372.698928][T12736] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  372.709284][T12736] em28xx 1-1:0.132: analog set to bulk mode.
[  372.722099][T12735] em28xx 1-1:0.132: Registering V4L2 extension
[  372.770219][   T82] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.798892][   T82] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.894792][T12735] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  372.905076][T12736] usb 1-1: USB disconnect, device number 41
[  372.931028][T12736] em28xx 1-1:0.132: Disconnecting em28xx
[  373.171032][   T82] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  373.207784][   T82] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.283716][T12735] usb 1-1: Decoder not found
[  373.312058][T12735] em28xx 1-1:0.132: failed to create media graph
[  373.342212][T12735] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  373.362807][T12735] em28xx 1-1:0.132: Remote control support is not available for this card.
[  373.415090][T12736] em28xx 1-1:0.132: Closing input extension
[  373.435417][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  373.454828][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  373.468487][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  373.477278][T12736] em28xx 1-1:0.132: Freeing device
[  373.513899][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  373.541486][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  373.634835][   T82] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  373.688430][   T82] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.898841][ T5827] Bluetooth: hci0: command tx timeout
[  374.445078][   T82] bridge_slave_1: left allmulticast mode
[  374.452005][   T82] bridge_slave_1: left promiscuous mode
[  374.457934][   T82] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.469439][   T82] bridge_slave_0: left allmulticast mode
[  374.475143][   T82] bridge_slave_0: left promiscuous mode
[  374.481879][   T82] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.569985][T12719] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  374.782527][T12719] usb 1-1: Using ep0 maxpacket: 32
[  374.795483][T12719] usb 1-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40
[  374.828248][T12719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.836309][T12719] usb 1-1: Product: syz
[  374.848782][T12719] usb 1-1: Manufacturer: syz
[  374.853469][T12719] usb 1-1: SerialNumber: syz
[  374.984666][T13119] loop5: detected capacity change from 0 to 7
[  375.022935][T13119] Dev loop5: unable to read RDB block 7
[  375.032474][   T82] bond1 (unregistering): (slave geneve2): Releasing active interface
[  375.059536][T13119]  loop5: unable to read partition table
[  375.089544][T13119] loop5: partition table beyond EOD, truncated
[  375.134440][T13119] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  375.169695][T12719] usb 1-1: 1:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  375.180717][   T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  375.200520][T12719] usb 1-1: found format II with max.bitrate = 1, frame size=2269
[  375.226243][T12719] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates: set it to a predefined value (clock 2).
[  375.239890][T12719] usb 1-1: 1:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  375.248432][T12719] usb 1-1: found format II with max.bitrate = 1, frame size=2269
[  375.257055][   T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  375.279980][T12719] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates: set it to a predefined value (clock 2).
[  375.297406][   T82] bond0 (unregistering): Released all slaves
[  375.314982][   T82] bond1 (unregistering): Released all slaves
[  375.330670][T12719] usb 1-1: 1:1: cannot get freq (v2/v3): err -71
[  375.363128][T12719] usb 1-1: unit 7 not found!
[  375.542149][T12719] usb 1-1: USB disconnect, device number 42
[  375.661004][ T5827] Bluetooth: hci4: command tx timeout
[  375.739149][ T6203] udevd[6203]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  375.825915][T13087] chnl_net:caif_netlink_parms(): no params data found
[  376.334326][T13087] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.368447][T13087] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.395270][T13087] bridge_slave_0: entered allmulticast mode
[  376.405999][T13087] bridge_slave_0: entered promiscuous mode
[  376.530329][T13087] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.546491][T13087] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.583403][T13087] bridge_slave_1: entered allmulticast mode
[  376.650560][T13087] bridge_slave_1: entered promiscuous mode
[  376.896196][T13149] xt_hashlimit: size too large, truncated to 1048576
[  376.946196][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  376.956610][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  376.966423][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  376.975072][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  376.990751][T13087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  377.000368][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  377.061835][T13087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  377.352011][T13087] team0: Port device team_slave_0 added
[  377.426938][T13087] team0: Port device team_slave_1 added
[  377.556346][   T82] hsr_slave_0: left promiscuous mode
[  377.576728][   T82] hsr_slave_1: left promiscuous mode
[  377.584183][   T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  377.591963][   T82] batman_adv: batadv0: Removing interface: batadv_slave_0
[  377.603684][   T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  377.611457][   T82] batman_adv: batadv0: Removing interface: batadv_slave_1
[  377.625836][   T82] veth1_macvtap: left promiscuous mode
[  377.642004][   T82] veth0_macvtap: left promiscuous mode
[  377.654453][   T82] veth1_vlan: left promiscuous mode
[  377.665711][   T82] veth0_vlan: left promiscuous mode
[  377.750231][ T5827] Bluetooth: hci4: command tx timeout
[  378.223739][   T82] team0 (unregistering): Port device team_slave_0 removed
[  378.385822][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2743'.
[  378.395031][T13168] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2743'.
[  378.499953][T13087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  378.507076][T13087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  378.534570][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2743'.
[  378.560166][T13168] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2743'.
[  378.569229][T13087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  378.584083][T13087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  378.593519][T13087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  378.630192][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  378.636601][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  378.676901][T13087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  378.714496][   T49] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  378.723736][   T49] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  378.733658][   T49] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  378.796301][   T49] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  379.012966][T13087] hsr_slave_0: entered promiscuous mode
[  379.020252][T13087] hsr_slave_1: entered promiscuous mode
[  379.100897][ T5827] Bluetooth: hci1: command tx timeout
[  379.362870][T13199] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2749'.
[  379.439417][T13203] netlink: 'syz.6.2749': attribute type 10 has an invalid length.
[  379.639629][T13203] team0: Port device netdevsim0 added
[  379.751807][   T82] IPVS: stop unused estimator thread 0...
[  379.821948][ T5827] Bluetooth: hci4: command tx timeout
[  380.032459][T13154] chnl_net:caif_netlink_parms(): no params data found
[  380.444429][   T82] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  380.466078][   T82] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.644054][   T82] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  380.678366][   T82] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.764408][T13154] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.819529][T13154] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.850547][T13154] bridge_slave_0: entered allmulticast mode
[  380.867761][T13154] bridge_slave_0: entered promiscuous mode
[  380.912392][T13154] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.930824][T13154] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.958089][T13154] bridge_slave_1: entered allmulticast mode
[  380.973001][T13154] bridge_slave_1: entered promiscuous mode
[  381.070711][   T82] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  381.108440][   T82] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.183750][ T5827] Bluetooth: hci1: command tx timeout
[  381.256529][T13154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.350224][   T82] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  381.366443][   T82] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.477884][T13154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.579048][T13087] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  381.609699][T13154] team0: Port device team_slave_0 added
[  381.651017][T13154] team0: Port device team_slave_1 added
[  381.668954][T13087] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  381.707590][T13087] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  381.812875][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2759'.
[  381.894602][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2759'.
[  381.901993][ T5827] Bluetooth: hci4: command tx timeout
[  381.944339][T13087] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  382.007873][T13154] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.028210][T13154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.092953][T13154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  382.121433][T13154] batman_adv: batadv0: Adding interface: batadv_slave_1
[  382.139914][T13154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.220280][T13154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  382.428916][T12719] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  382.448655][T13154] hsr_slave_0: entered promiscuous mode
[  382.456100][T13154] hsr_slave_1: entered promiscuous mode
[  382.470516][T13154] debugfs: 'hsr0' already exists in 'hsr'
[  382.476292][T13154] Cannot create hsr debugfs directory
[  382.503753][   T82] bridge_slave_1: left allmulticast mode
[  382.522516][   T82] bridge_slave_1: left promiscuous mode
[  382.539226][   T82] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.562839][   T82] bridge_slave_0: left allmulticast mode
[  382.571198][   T82] bridge_slave_0: left promiscuous mode
[  382.578904][   T82] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.602086][T12719] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  382.616280][T12719] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.648402][T12719] usb 9-1: Product: syz
[  382.652634][T12719] usb 9-1: Manufacturer: syz
[  382.657267][T12719] usb 9-1: SerialNumber: syz
[  382.670016][T12719] usb 9-1: config 0 descriptor??
[  382.693856][T12719] hub 9-1:0.0: bad descriptor, ignoring hub
[  382.708535][T12719] hub 9-1:0.0: probe with driver hub failed with error -5
[  382.901464][T12719] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  382.948882][T12719] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  382.981155][T12719] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  382.998432][T12719] usb 9-1: media controller created
[  383.050043][T12719] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  383.221095][T12719] DVB: Unable to find symbol dib7000p_attach()
[  383.235997][T12719] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  383.258737][ T5827] Bluetooth: hci1: command tx timeout
[  383.288220][   T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  383.316402][   T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  383.329431][   T82] bond0 (unregistering): Released all slaves
[  383.348198][T12719] rc_core: IR keymap rc-dib0700-rc5 not found
[  383.356602][T12719] Registered IR keymap rc-empty
[  383.357289][   T29] audit: type=1326 audit(1774357229.939:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13280 comm="syz.6.2765" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0022d9c799 code=0x0
[  383.379656][T12719] dvb-usb: could not initialize remote control.
[  383.419934][T12719] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  383.490046][   T82] tipc: Left network mode
[  383.794843][T13292] i2c i2c-1: Invalid block size returned: 58
[  383.866755][   T82] hsr_slave_0: left promiscuous mode
[  383.891572][   T82] hsr_slave_1: left promiscuous mode
[  383.904628][   T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  383.912391][   T82] batman_adv: batadv0: Removing interface: batadv_slave_0
[  383.930159][   T82] veth1_macvtap: left promiscuous mode
[  383.935807][   T82] veth0_macvtap: left promiscuous mode
[  383.942323][   T82] veth1_vlan: left promiscuous mode
[  383.947686][   T82] veth0_vlan: left promiscuous mode
[  383.996485][T12735] usb 9-1: USB disconnect, device number 2
[  384.047239][T12735] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  384.256489][   T82] team0 (unregistering): Port device team_slave_1 removed
[  384.292856][   T82] team0 (unregistering): Port device team_slave_0 removed
[  384.361750][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807e2c3000: rx timeout, send abort
[  384.372571][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e2c3000: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session.
[  384.620693][T13087] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.682158][T13087] 8021q: adding VLAN 0 to HW filter on device team0
[  384.695147][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.702637][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  384.761409][T13154] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  384.792542][T13154] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  384.852180][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.859412][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.945542][T13154] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  384.992509][T13154] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  385.338771][ T5827] Bluetooth: hci1: command tx timeout
[  385.351296][   T82] IPVS: stop unused estimator thread 0...
[  385.442890][T13087] 8021q: adding VLAN 0 to HW filter on device batadv0
[  385.680143][T13087] veth0_vlan: entered promiscuous mode
[  385.707665][T13154] 8021q: adding VLAN 0 to HW filter on device bond0
[  385.791425][T13154] 8021q: adding VLAN 0 to HW filter on device team0
[  385.850457][T13087] veth1_vlan: entered promiscuous mode
[  385.884782][   T85] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.892034][   T85] bridge0: port 1(bridge_slave_0) entered forwarding state
[  385.967480][   T85] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.974695][   T85] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.169244][T13087] veth0_macvtap: entered promiscuous mode
[  386.201055][T13087] veth1_macvtap: entered promiscuous mode
[  386.344583][T13087] batman_adv: batadv0: Interface activated: batadv_slave_0
[  386.402453][T13087] batman_adv: batadv0: Interface activated: batadv_slave_1
[  386.466781][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.499552][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.579439][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.611724][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.735294][T13154] 8021q: adding VLAN 0 to HW filter on device batadv0
[  386.900070][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.929085][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.005618][T13360] KVM: debugfs: duplicate directory 13360-5
[  387.034023][T13154] veth0_vlan: entered promiscuous mode
[  387.142957][T13154] veth1_vlan: entered promiscuous mode
[  387.167586][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.190024][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.258059][T13154] veth0_macvtap: entered promiscuous mode
[  387.549902][T13154] veth1_macvtap: entered promiscuous mode
[  387.617669][T13154] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.694632][T13154] batman_adv: batadv0: Interface activated: batadv_slave_1
[  387.737873][   T49] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  387.810446][   T49] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  387.904029][   T49] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  387.930257][   T49] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  387.961129][T13381] kvm: user requested TSC rate below hardware speed
[  388.012873][T13381] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  388.050943][T12719] usb 7-1: new low-speed USB device number 6 using dummy_hcd
[  388.105827][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.125494][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.134466][T12731] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  388.215567][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.227095][T12719] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  388.236326][T12719] usb 7-1: config 0 has no interface number 0
[  388.251939][T12719] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  388.258297][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.267581][T12719] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  388.285916][T12719] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  388.332486][T12719] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.350827][T12731] usb 1-1: config 2 has an invalid interface number: 88 but max is 0
[  388.359518][T12731] usb 1-1: config 2 has no interface number 0
[  388.365676][T12731] usb 1-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64
[  388.382399][T12731] usb 1-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  388.418959][T12719] usb 7-1: config 0 descriptor??
[  388.425088][T13379] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  388.488811][T12731] usb 1-1: config 2 interface 88 has no altsetting 0
[  388.496331][T12719] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  388.510535][T12731] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  388.522070][T12731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.555823][T12731] usb 1-1: Product: syz
[  388.571986][T12731] usb 1-1: Manufacturer: syz
[  388.579949][T12731] usb 1-1: SerialNumber: syz
[  388.612423][T13383] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  388.633246][T13383] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  388.679349][T12719] usb 7-1: USB disconnect, device number 6
[  388.685301][    C1] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  388.871285][T13383] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  388.878664][ T5922] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  388.888455][T13383] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  389.038394][ T5922] usb 10-1: Using ep0 maxpacket: 16
[  389.046390][ T5922] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  389.065209][ T5922] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  389.090954][ T5922] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  389.122422][ T5922] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  389.138633][ T5922] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.146873][ T5922] usb 10-1: Product: syz
[  389.152025][ T5922] usb 10-1: Manufacturer: syz
[  389.164192][ T5922] usb 10-1: SerialNumber: syz
[  389.724351][ T5922] usb 10-1: 0:2 : does not exist
[  389.987100][T12731] asix 1-1:2.88 (unnamed net_device) (uninitialized): invalid hw address, using random
[  390.187733][T12731] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  390.218028][T12731] asix 1-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  390.230187][T12731] asix 1-1:2.88: probe with driver asix failed with error -71
[  390.243223][T12731] usb 1-1: USB disconnect, device number 43
[  390.666825][ T5922] usb 10-1: USB disconnect, device number 2
[  393.075751][T13492] netlink: 'syz.8.2810': attribute type 9 has an invalid length.
[  393.100712][T13492] netlink: 'syz.8.2810': attribute type 11 has an invalid length.
[  393.118549][T13492] netlink: 'syz.8.2810': attribute type 12 has an invalid length.
[  393.150923][T13492] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.2810'.
[  393.199057][T13492] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2810'.
[  395.061807][T13558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2829'.
[  395.081594][T13558] netlink: 'syz.3.2829': attribute type 12 has an invalid length.
[  395.203392][T13558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2829'.
[  395.208903][ T1017] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  395.266741][ T1017] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  395.271663][T13558] netlink: 'syz.3.2829': attribute type 12 has an invalid length.
[  395.332744][ T1017] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  395.350328][T13562] Invalid argument reading file caps for ./file0
[  395.398292][ T1017] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  395.414228][T13563] bridge0: port 3(erspan0) entered blocking state
[  395.478961][T13563] bridge0: port 3(erspan0) entered disabled state
[  395.487263][T13563] erspan0: entered allmulticast mode
[  395.544945][T13563] erspan0: entered promiscuous mode
[  395.582165][T13563] bridge0: port 3(erspan0) entered blocking state
[  395.589309][T13563] bridge0: port 3(erspan0) entered forwarding state
[  395.652170][T13568] erspan0: left allmulticast mode
[  395.705412][T13568] erspan0: left promiscuous mode
[  395.729293][T13568] bridge0: port 3(erspan0) entered disabled state
[  396.703193][T12735] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  396.778713][T12737] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  396.898599][T12735] usb 10-1: Using ep0 maxpacket: 16
[  396.919523][T12735] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  396.952059][T12735] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  396.973204][T12737] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  396.992668][T12735] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.001597][T12737] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.014803][T12735] usb 10-1: Product: syz
[  397.029475][T12737] usb 9-1: Product: syz
[  397.033819][T12735] usb 10-1: Manufacturer: syz
[  397.039095][T12737] usb 9-1: Manufacturer: syz
[  397.043863][T12735] usb 10-1: SerialNumber: syz
[  397.049194][T12737] usb 9-1: SerialNumber: syz
[  397.057439][T12735] usb 10-1: config 0 descriptor??
[  397.079147][T12737] usb 9-1: config 0 descriptor??
[  397.086255][T12735] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  397.102155][T12735] em28xx 10-1:0.0: DVB interface 0 found: bulk
[  397.133718][T12737] hub 9-1:0.0: bad descriptor, ignoring hub
[  397.142905][T12737] hub 9-1:0.0: probe with driver hub failed with error -5
[  397.294932][   T29] audit: type=1326 audit(1774357243.879:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.0.2835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3839d9c799 code=0x0
[  397.351385][T12737] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  397.371141][T12737] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  397.381440][T12737] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  397.428597][T12737] usb 9-1: media controller created
[  397.485500][T12737] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  397.868287][T12735] em28xx 10-1:0.0: unknown em28xx chip ID (0)
[  397.956179][T13623] netlink: 212344 bytes leftover after parsing attributes in process `syz.6.2845'.
[  398.016676][T12737] DVB: Unable to find symbol dib7000p_attach()
[  398.034405][T12737] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  398.178420][T12737] rc_core: IR keymap rc-dib0700-rc5 not found
[  398.184593][T12737] Registered IR keymap rc-empty
[  398.221293][T12737] dvb-usb: could not initialize remote control.
[  398.227643][T12737] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  398.421001][T13630] kvm: Disabled LAPIC found during irq injection
[  398.502918][T12735] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  398.511826][T12735] em28xx 10-1:0.0: board has no eeprom
[  398.574071][  T975] usb 9-1: USB disconnect, device number 3
[  398.588415][T12735] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  398.612032][T12735] em28xx 10-1:0.0: dvb set to bulk mode.
[  398.617998][ T5902] em28xx 10-1:0.0: Binding DVB extension
[  398.657679][T12735] usb 10-1: USB disconnect, device number 3
[  398.680346][  T975] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  398.690404][T12737] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  398.721547][T12735] em28xx 10-1:0.0: Disconnecting em28xx
[  398.757318][ T5902] em28xx 10-1:0.0: Registering input extension
[  398.765344][T12735] em28xx 10-1:0.0: Closing input extension
[  398.826475][T12735] em28xx 10-1:0.0: Freeing device
[  398.858277][T12737] usb 7-1: Using ep0 maxpacket: 8
[  398.872342][T12737] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  398.897650][T12737] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  398.912933][T12737] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  398.926828][T12737] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  398.944553][T12737] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  398.963170][T12737] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  398.973322][T12737] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.221204][T12737] usb 7-1: usb_control_msg returned -32
[  399.226896][T12737] usbtmc 7-1:16.0: can't read capabilities
[  399.613561][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  399.628688][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  399.638729][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  399.650557][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  399.662498][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  399.756309][T13661] bridge_slave_0: left allmulticast mode
[  399.762142][T13661] bridge_slave_0: left promiscuous mode
[  399.767978][T13661] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.791427][T13661] bridge_slave_1: left allmulticast mode
[  399.797128][T13661] bridge_slave_1: left promiscuous mode
[  399.805009][T13661] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.831438][T13661] bond0: (slave bond_slave_0): Releasing backup interface
[  399.878104][T13661] bond0: (slave bond_slave_1): Releasing backup interface
[  399.910394][T13661] team0: Port device team_slave_0 removed
[  399.921272][T13661] team0: Port device team_slave_1 removed
[  399.927952][T13661] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  399.936175][T13661] batman_adv: batadv0: Removing interface: batadv_slave_0
[  399.949567][T13661] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  399.957022][T13661] batman_adv: batadv0: Removing interface: batadv_slave_1
[  399.979456][T13661] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  400.052571][T13663] bridge0: port 1(team0) entered blocking state
[  400.059512][T13663] bridge0: port 1(team0) entered disabled state
[  400.067742][T13663] team0: entered allmulticast mode
[  400.082702][T13667] usbtmc 7-1:16.0: usb_control_msg returned -32
[  400.090141][T13663] team0: entered promiscuous mode
[  400.285960][T12735] usb 7-1: USB disconnect, device number 7
[  400.655677][T13662] chnl_net:caif_netlink_parms(): no params data found
[  400.959170][T13662] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.966367][T13662] bridge0: port 1(bridge_slave_0) entered disabled state
[  401.055654][T13662] bridge_slave_0: entered allmulticast mode
[  401.070986][T13662] bridge_slave_0: entered promiscuous mode
[  401.108946][T13662] bridge0: port 2(bridge_slave_1) entered blocking state
[  401.116138][T13662] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.124432][T13662] bridge_slave_1: entered allmulticast mode
[  401.140463][ T5902] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  401.145998][T13662] bridge_slave_1: entered promiscuous mode
[  401.298812][ T5902] usb 9-1: Using ep0 maxpacket: 16
[  401.320525][ T5902] usb 9-1: config 0 has no interfaces?
[  401.339332][ T5902] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  401.358583][ T5902] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  401.385936][ T5902] usb 9-1: Manufacturer: syz
[  401.411325][ T5902] usb 9-1: config 0 descriptor??
[  401.411986][T13662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  401.543611][T13662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  401.657054][T13662] team0: Port device team_slave_0 added
[  401.673139][T13662] team0: Port device team_slave_1 added
[  401.717596][T13662] batman_adv: batadv0: Adding interface: batadv_slave_0
[  401.734579][T13662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  401.766813][T13662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.770700][ T5832] Bluetooth: hci2: command tx timeout
[  401.785761][   T42] usb 9-1: USB disconnect, device number 4
[  401.836143][T13662] batman_adv: batadv0: Adding interface: batadv_slave_1
[  401.843819][T13662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  401.922998][T13662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  402.057274][T13662] hsr_slave_0: entered promiscuous mode
[  402.074803][T13662] hsr_slave_1: entered promiscuous mode
[  402.112083][T13662] debugfs: 'hsr0' already exists in 'hsr'
[  402.128239][T13662] Cannot create hsr debugfs directory
[  402.203142][T13727] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2882'.
[  402.931131][T12735] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  403.141882][T12735] usb 9-1: Using ep0 maxpacket: 16
[  403.226362][T12735] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  403.254394][T12735] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.301789][T12735] usb 9-1: Product: syz
[  403.306020][T12735] usb 9-1: Manufacturer: syz
[  403.327021][T12735] usb 9-1: SerialNumber: syz
[  403.818371][ T5832] Bluetooth: hci2: command tx timeout
[  404.910458][T13662] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  404.914134][T12735] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71
[  404.967452][T12735] usb 9-1: USB disconnect, device number 5
[  404.982006][T13662] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  405.115789][T13662] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  405.206297][T13662] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  405.393118][T13794] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1841182687 (58917845984 ns) > initial count (45424741664 ns). Using initial count to start timer.
[  405.469515][T13800] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1852575491 (118564831424 ns) > initial count (78018577472 ns). Using initial count to start timer.
[  405.692894][T13662] 8021q: adding VLAN 0 to HW filter on device bond0
[  405.791969][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2901'.
[  405.814935][T13662] 8021q: adding VLAN 0 to HW filter on device team0
[  405.882245][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2901'.
[  405.898329][ T5832] Bluetooth: hci2: command tx timeout
[  405.916084][   T73] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.923323][   T73] bridge0: port 1(bridge_slave_0) entered forwarding state
[  406.017580][   T73] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.024840][   T73] bridge0: port 2(bridge_slave_1) entered forwarding state
[  406.255444][T13662] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.313276][T13818] veth3: entered promiscuous mode
[  406.455225][T13662] veth0_vlan: entered promiscuous mode
[  406.491280][T13662] veth1_vlan: entered promiscuous mode
[  406.569896][T13662] veth0_macvtap: entered promiscuous mode
[  406.586938][T13662] veth1_macvtap: entered promiscuous mode
[  406.628008][T13662] batman_adv: batadv0: Interface activated: batadv_slave_0
[  406.691370][T13662] batman_adv: batadv0: Interface activated: batadv_slave_1
[  406.740118][   T82] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  406.758104][   T82] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.791609][   T82] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.813764][   T82] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.065074][   T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.095218][   T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.250983][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.288490][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.993208][ T5832] Bluetooth: hci2: command tx timeout
[  408.788720][ T5902] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  409.010952][ T5902] usb 10-1: Using ep0 maxpacket: 8
[  409.054579][ T5902] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  409.066936][ T5902] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.077552][ T5902] usb 10-1: Product: syz
[  409.081920][ T5902] usb 10-1: Manufacturer: syz
[  409.089368][ T5902] usb 10-1: SerialNumber: syz
[  409.097245][ T5902] usb 10-1: config 0 descriptor??
[  409.159743][T13890] xt_hashlimit: size too large, truncated to 1048576
[  409.299156][T13896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2928'.
[  409.325775][T13896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2928'.
[  409.350656][ T5902] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  410.617748][ T5902] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  410.683181][ T5902] usb 10-1: USB disconnect, device number 4
[  410.828667][T12719] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  410.924481][   T82] team0: Port device bond0 removed
[  410.951894][   T82] bond0 (unregistering): Released all slaves
[  410.990116][T12719] usb 7-1: Using ep0 maxpacket: 8
[  411.002748][T12719] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  411.013525][T12719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.043314][T12719] usb 7-1: Product: syz
[  411.052596][T12719] usb 7-1: Manufacturer: syz
[  411.057243][T12719] usb 7-1: SerialNumber: syz
[  411.137782][T12719] usb 7-1: config 0 descriptor??
[  411.310721][T13942] netlink: 'syz.3.2938': attribute type 1 has an invalid length.
[  411.394337][T12719] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  411.887429][T13948] bond1: (slave bridge1): making interface the new active one
[  411.919315][T13948] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  411.968897][T13959] syzkaller1: entered promiscuous mode
[  411.980354][T13959] syzkaller1: entered allmulticast mode
[  412.022062][T12719] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  412.037421][T12719] usb 7-1: USB disconnect, device number 8
[  412.545646][   T82] hsr_slave_0: left promiscuous mode
[  412.566233][   T82] hsr_slave_1: left promiscuous mode
[  413.337083][ T5902] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[  413.504347][ T5902] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  413.532429][ T5902] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.564523][ T5902] usb 10-1: Product: syz
[  413.577910][ T5902] usb 10-1: Manufacturer: syz
[  413.602858][ T5902] usb 10-1: SerialNumber: syz
[  413.622688][ T5902] usb 10-1: config 0 descriptor??
[  413.649555][ T5902] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  414.547873][   T82] IPVS: stop unused estimator thread 0...
[  415.097170][ T5902] gspca_stk1135: reg_w 0xf err -71
[  415.117879][ T5902] gspca_stk1135: serial bus timeout: status=0x00
[  415.140155][ T5902] gspca_stk1135: Sensor write failed
[  415.158496][ T5902] gspca_stk1135: serial bus timeout: status=0x00
[  415.173186][ T5902] gspca_stk1135: Sensor write failed
[  415.186695][ T5902] gspca_stk1135: serial bus timeout: status=0x00
[  415.219951][ T5902] gspca_stk1135: Sensor read failed
[  415.225713][ T5902] gspca_stk1135: serial bus timeout: status=0x00
[  415.247432][ T5902] gspca_stk1135: Sensor read failed
[  415.253844][ T5902] gspca_stk1135: Detected sensor type unknown (0x0)
[  415.267888][ T5902] gspca_stk1135: serial bus timeout: status=0x00
[  415.277989][ T5902] gspca_stk1135: Sensor read failed
[  415.300231][ T5902] gspca_stk1135: serial bus timeout: status=0x00
[  415.316246][ T5902] gspca_stk1135: Sensor read failed
[  415.345994][ T5902] gspca_stk1135: serial bus timeout: status=0x00
[  415.362946][ T5902] gspca_stk1135: Sensor write failed
[  415.380708][ T5902] gspca_stk1135: serial bus timeout: status=0x00
[  415.400965][ T5902] gspca_stk1135: Sensor write failed
[  415.406392][ T5902] stk1135 10-1:0.0: probe with driver stk1135 failed with error -71
[  415.494427][ T5902] usb 10-1: USB disconnect, device number 5
[  415.683711][T14052] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2963'.
[  415.789918][T14052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  415.893245][T14052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  415.931685][T14052] bond0 (unregistering): Released all slaves
[  417.175308][T14090] xt_hashlimit: size too large, truncated to 1048576
[  417.349925][T14098] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2973'.
[  419.154924][ T5902] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  419.352876][ T5902] usb 4-1: Using ep0 maxpacket: 16
[  419.374614][ T5902] usb 4-1: config 0 has no interfaces?
[  419.405518][ T5902] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  419.471325][ T5902] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  419.498033][ T5902] usb 4-1: Manufacturer: syz
[  419.596094][ T5902] usb 4-1: config 0 descriptor??
[  419.967887][T12735] usb 4-1: USB disconnect, device number 57
[  420.211108][T14190] 8021q: VLANs not supported on gre0
[  420.574440][   T73] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.650432][   T73] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.698238][   T73] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  420.977045][   T73] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.012590][   T73] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.052403][   T73] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  421.326938][   T73] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.370895][   T73] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.416289][   T73] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  421.667418][   T73] team0: Port device netdevsim0 removed
[  421.697984][   T73] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.708534][ T5902] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  421.748283][   T73] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.804402][   T73] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  421.881890][ T5902] usb 4-1: Using ep0 maxpacket: 32
[  421.969493][ T5902] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  421.984909][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.040220][ T5902] usb 4-1: Product: syz
[  422.044452][ T5902] usb 4-1: Manufacturer: syz
[  422.074612][ T5902] usb 4-1: SerialNumber: syz
[  422.126279][ T5902] usb 4-1: config 0 descriptor??
[  422.159782][ T5902] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  422.199786][ T5902] dvb-usb: bulk message failed: -22 (2/0)
[  422.225332][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  422.244793][ T5902] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  422.262263][ T5902] usb 4-1: media controller created
[  422.267845][   T73] bridge_slave_1: left allmulticast mode
[  422.274205][   T73] bridge_slave_1: left promiscuous mode
[  422.286429][   T73] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.314583][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  422.337740][   T73] bridge_slave_0: left allmulticast mode
[  422.347479][   T73] bridge_slave_0: left promiscuous mode
[  422.362424][T14215] dvb-usb: bulk message failed: -22 (7/0)
[  422.391261][   T73] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.429067][ T5902] usb 4-1: selecting invalid altsetting 7
[  422.445103][ T5902] cxusb: set interface failed
[  422.452635][ T5902] dvb-usb: bulk message failed: -22 (1/0)
[  422.537203][ T5902] DVB: Unable to find symbol lgdt330x_attach()
[  422.553164][ T5902] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  422.698292][ T5902] rc_core: IR keymap rc-dvico-portable not found
[  422.712050][ T5902] Registered IR keymap rc-empty
[  422.739253][ T5902] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  422.782697][ T5902] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input48
[  422.815141][ T5902] dvb-usb: schedule remote query interval to 100 msecs.
[  422.842646][ T5902] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  422.907632][ T5902] usb 4-1: USB disconnect, device number 58
[  423.149037][   T73] bond1 (unregistering): (slave geneve2): Releasing active interface
[  423.293439][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  423.313539][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  423.323728][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  423.346716][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  423.360146][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  423.466209][ T5902] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  423.572218][   T73] bond1 (unregistering): Released all slaves
[  424.410269][ T5902] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  424.598063][ T5902] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  424.626427][ T5902] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.648305][ T5902] usb 10-1: Product: syz
[  424.673426][ T5902] usb 10-1: Manufacturer: syz
[  424.683488][ T5902] usb 10-1: SerialNumber: syz
[  424.693708][   T73] hsr_slave_0: left promiscuous mode
[  424.704951][ T5902] usb 10-1: config 0 descriptor??
[  424.720389][   T73] hsr_slave_1: left promiscuous mode
[  424.735313][   T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  424.751599][   T73] batman_adv: batadv0: Removing interface: batadv_slave_0
[  424.769940][   T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  424.796137][   T73] batman_adv: batadv0: Removing interface: batadv_slave_1
[  424.847449][   T73] veth1_macvtap: left promiscuous mode
[  424.866783][   T73] veth0_macvtap: left promiscuous mode
[  424.908540][   T73] veth1_vlan: left promiscuous mode
[  424.934238][   T73] veth0_vlan: left promiscuous mode
[  424.950705][  T975] usb 10-1: USB disconnect, device number 6
[  425.422553][ T5827] Bluetooth: hci3: command tx timeout
[  425.623187][   T73] team0 (unregistering): Port device team_slave_1 removed
[  425.654805][   T73] team0 (unregistering): Port device team_slave_0 removed
[  426.325230][T14260] chnl_net:caif_netlink_parms(): no params data found
[  426.936005][T14260] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.964000][T14260] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.999652][T14260] bridge_slave_0: entered allmulticast mode
[  427.023846][T14260] bridge_slave_0: entered promiscuous mode
[  427.078550][T14260] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.085800][T14260] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.103317][T14260] bridge_slave_1: entered allmulticast mode
[  427.131930][T14260] bridge_slave_1: entered promiscuous mode
[  427.507569][T14260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  427.512592][ T5827] Bluetooth: hci3: command tx timeout
[  427.606129][T14260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  427.836469][T14260] team0: Port device team_slave_0 added
[  427.868564][T14260] team0: Port device team_slave_1 added
[  427.994610][T14385] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3047'.
[  428.036963][T14260] batman_adv: batadv0: Adding interface: batadv_slave_0
[  428.066592][T14260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  428.125860][T14260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  428.177510][T14260] batman_adv: batadv0: Adding interface: batadv_slave_1
[  428.194312][T14260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  428.225401][T14260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  428.417112][T14260] hsr_slave_0: entered promiscuous mode
[  428.436185][T14260] hsr_slave_1: entered promiscuous mode
[  428.461896][T14260] debugfs: 'hsr0' already exists in 'hsr'
[  428.474502][T14260] Cannot create hsr debugfs directory
[  429.588586][ T5827] Bluetooth: hci3: command tx timeout
[  429.638449][   T42] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  429.982557][   T42] usb 9-1: Using ep0 maxpacket: 16
[  430.010208][   T42] usb 9-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  430.028707][   T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.060661][   T42] usb 9-1: Product: syz
[  430.080641][   T42] usb 9-1: Manufacturer: syz
[  430.096459][   T42] usb 9-1: SerialNumber: syz
[  430.139692][   T42] usb 9-1: config 0 descriptor??
[  430.159931][   T42] ssu100 9-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  430.468480][T14260] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  430.535415][T14260] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  430.575552][T14260] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  430.611527][T14260] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  430.825453][T14260] 8021q: adding VLAN 0 to HW filter on device bond0
[  430.894059][T14260] 8021q: adding VLAN 0 to HW filter on device team0
[  430.987214][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.994458][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.043094][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.050304][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.321608][T14260] 8021q: adding VLAN 0 to HW filter on device batadv0
[  431.382155][   T42] usb 9-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0
[  431.489483][T14260] veth0_vlan: entered promiscuous mode
[  431.545656][T14260] veth1_vlan: entered promiscuous mode
[  431.606950][T12737] usb 9-1: USB disconnect, device number 6
[  431.632896][T12737] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0
[  431.662709][ T5827] Bluetooth: hci3: command tx timeout
[  431.668906][T12737] ssu100 9-1:0.0: device disconnected
[  431.733701][T14260] veth0_macvtap: entered promiscuous mode
[  431.761103][T14260] veth1_macvtap: entered promiscuous mode
[  431.769334][T14459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3061'.
[  431.831708][T14260] batman_adv: batadv0: Interface activated: batadv_slave_0
[  431.869508][T14260] batman_adv: batadv0: Interface activated: batadv_slave_1
[  431.900006][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  431.928776][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  431.937669][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  432.010789][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  432.342789][T14478] netlink: 'syz.4.3066': attribute type 1 has an invalid length.
[  432.350779][   T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  432.388308][   T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.395789][T14478] netlink: 'syz.4.3066': attribute type 1 has an invalid length.
[  432.434317][T14478] netlink: 'syz.4.3066': attribute type 1 has an invalid length.
[  432.484811][T14478] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3066'.
[  432.513025][T14478] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3066'.
[  432.652001][T14487] batadv_slave_1: entered promiscuous mode
[  432.700965][T14487] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3068'.
[  432.786164][T14487] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  432.851190][T14487] batadv_slave_1 (unregistering): left promiscuous mode
[  432.902000][T14487] batman_adv: batadv0: Removing interface: batadv_slave_1
[  433.102709][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  433.139294][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  433.948327][   T42] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  434.114005][   T42] usb 10-1: config index 0 descriptor too short (expected 65183, got 72)
[  434.145853][   T42] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  434.180216][   T42] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.223772][   T42] usb 10-1: Product: syz
[  434.265607][   T42] usb 10-1: Manufacturer: syz
[  434.295833][   T42] usb 10-1: SerialNumber: syz
[  434.343286][   T42] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  434.494095][T12719] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  434.778501][T14514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  434.787522][T14514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  434.845148][T14514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  434.899036][T14514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  434.922329][T14514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  434.962652][T14514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  435.003831][T12731] usb 10-1: USB disconnect, device number 7
[  435.595473][T12719] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive
[  435.623965][T12719] ath9k_htc: Failed to initialize the device
[  435.748958][T12731] usb 10-1: ath9k_htc: USB layer deinitialized
[  436.139068][T12731] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  436.182009][T14579] netlink: 856 bytes leftover after parsing attributes in process `syz.8.3090'.
[  436.301080][T12731] usb 10-1: Using ep0 maxpacket: 32
[  436.315360][T12731] usb 10-1: config index 0 descriptor too short (expected 241, got 72)
[  436.328213][T12731] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  436.370532][T12731] usb 10-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da
[  436.418386][T12731] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.485842][T12731] usb 10-1: config 0 descriptor??
[  436.544245][T12731] mos7840 10-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected
[  436.748929][T12731] mos7840 10-1:0.0: probe with driver mos7840 failed with error -71
[  436.809564][T14599] netlink: 'syz.8.3095': attribute type 1 has an invalid length.
[  436.830633][T12731] usb 10-1: USB disconnect, device number 8
[  436.964041][T14599] 8021q: adding VLAN 0 to HW filter on device bond1
[  437.004230][T14603] bond1: (slave gretap1): making interface the new active one
[  437.021413][T14603] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  437.670860][ T5889] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  437.858942][ T5889] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  437.898075][ T5889] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  437.932890][ T5889] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  437.961104][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.259222][ T5889] usb 5-1: GET_CAPABILITIES returned 0
[  438.264802][ T5889] usbtmc 5-1:16.0: can't read capabilities
[  438.493281][T12731] usb 5-1: USB disconnect, device number 19
[  438.528305][ T5834] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  438.683151][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  438.728229][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  438.749814][ T5834] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  438.793835][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.797743][T14651] batman_adv: batadv0: Adding interface: ip6gretap1
[  438.842612][ T5834] usb 4-1: config 0 descriptor??
[  438.909903][T14651] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  439.078232][T14651] batman_adv: batadv0: Interface activated: ip6gretap1
[  439.298963][ T5834] hid_parser_main: 3989 callbacks suppressed
[  439.299069][ T5834] cp2112 0003:10C4:EA90.0036: unknown main item tag 0x0
[  439.347926][ T5834] cp2112 0003:10C4:EA90.0036: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  439.477216][ T5834] cp2112 0003:10C4:EA90.0036: Part Number: 0x82 Device Version: 0xFE
[  440.063166][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  440.072742][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  440.308029][ T5889] usb 4-1: USB disconnect, device number 59
[  441.785790][T14727] syzkaller1: entered allmulticast mode
[  443.208345][ T5834] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  443.438228][ T5834] usb 9-1: Using ep0 maxpacket: 16
[  443.457680][ T5834] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  443.505594][ T5834] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  443.527277][ T5834] usb 9-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  443.558864][ T5834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.612325][ T5834] usb 9-1: config 0 descriptor??
[  444.065991][ T5834] logitech 0003:046D:C50C.0037: unknown main item tag 0x0
[  444.101696][ T5834] logitech 0003:046D:C50C.0037: unknown main item tag 0x0
[  444.138392][ T5834] logitech 0003:046D:C50C.0037: unknown main item tag 0x0
[  444.155798][ T5834] logitech 0003:046D:C50C.0037: unknown main item tag 0x0
[  444.179976][ T5834] logitech 0003:046D:C50C.0037: unknown main item tag 0x0
[  444.187184][ T5834] logitech 0003:046D:C50C.0037: unknown main item tag 0x0
[  444.219160][ T5834] logitech 0003:046D:C50C.0037: unknown main item tag 0x0
[  444.226534][ T5834] logitech 0003:046D:C50C.0037: unknown main item tag 0x0
[  444.245758][ T5834] logitech 0003:046D:C50C.0037: unknown main item tag 0x0
[  444.257182][ T5834] logitech 0003:046D:C50C.0037: item 0 0 0 8 parsing failed
[  444.265530][ T5834] logitech 0003:046D:C50C.0037: parse failed
[  444.272032][ T5834] logitech 0003:046D:C50C.0037: probe with driver logitech failed with error -22
[  444.302382][ T5834] usb 9-1: USB disconnect, device number 7
[  444.479773][T14765] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  445.597181][T14791] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3161'.
[  445.658315][T14791] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3161'.
[  447.038512][T14845] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1110260093 (4441040372 ns) > initial count (1585815008 ns). Using initial count to start timer.
[  447.369438][T14865] netlink: 208 bytes leftover after parsing attributes in process `syz.9.3190'.
[  447.406123][T14865] netlink: 208 bytes leftover after parsing attributes in process `syz.9.3190'.
[  447.641228][ T5889] hid_parser_main: 134 callbacks suppressed
[  447.641251][ T5889] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  447.689921][ T5889] hid-generic 0000:0000:0000.0038: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  448.174312][ T5834] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  448.616283][T14895] input: syz1 as /devices/virtual/input/input49
[  448.655244][ T5834] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  448.693855][ T5834] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  448.728179][ T5834] usb 3-1: config 0 interface 0 has no altsetting 0
[  448.736903][ T5834] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  448.773290][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.819993][ T5834] usb 3-1: config 0 descriptor??
[  448.928626][ T5889] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  449.008283][   T42] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  449.090919][ T5889] usb 10-1: Using ep0 maxpacket: 16
[  449.119845][ T5889] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  449.149887][ T5889] usb 10-1: config 0 interface 0 has no altsetting 0
[  449.170529][ T5889] usb 10-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  449.178430][   T42] usb 9-1: Using ep0 maxpacket: 8
[  449.189608][   T42] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[  449.190633][ T5889] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.212489][   T42] usb 9-1: config 179 has no interface number 0
[  449.220507][   T42] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  449.239819][   T42] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  449.240545][ T5889] usb 10-1: Product: syz
[  449.270678][ T5834] hid-steam 0003:28DE:1102.0039: unknown main item tag 0x0
[  449.271977][ T5889] usb 10-1: Manufacturer: syz
[  449.282308][   T42] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  449.293521][ T5889] usb 10-1: SerialNumber: syz
[  449.295683][ T5834] hid-steam 0003:28DE:1102.0039: unknown main item tag 0x0
[  449.310501][   T42] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  449.325758][ T5834] hid-steam 0003:28DE:1102.0039: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0
[  449.345560][ T5889] usb 10-1: config 0 descriptor??
[  449.358269][   T42] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  449.377296][   T42] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  449.388835][   T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.408663][T14900] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  449.434130][ T5834] hid-steam 0003:28DE:1102.0039: Steam Controller 'XXXXXXXXXX' connected
[  449.469082][T12731] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  449.510391][ T5834] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0039/input/input50
[  449.609438][    C0] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  449.620004][ T5834] hid-steam 0003:28DE:1102.003A: unknown main item tag 0x0
[  449.639763][ T5889] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input51
[  449.655301][T12731] usb 5-1: Using ep0 maxpacket: 16
[  449.663638][ T5834] hid-steam 0003:28DE:1102.003A: unknown main item tag 0x0
[  449.685073][T12731] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  449.697556][ T5889] imon:send_packet: packet tx failed (-71)
[  449.716423][T12731] usb 5-1: config 0 has no interfaces?
[  449.728363][ T5889] imon 10-1:0.0: panel buttons/knobs setup failed
[  449.747654][T12731] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  449.762388][T12731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.771698][ T5834] hid-steam 0003:28DE:1102.003A: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0
[  449.803150][T12731] usb 5-1: config 0 descriptor??
[  449.819809][ T5902] usb 4-1: new full-speed USB device number 60 using dummy_hcd
[  449.851652][ T5834] usb 3-1: USB disconnect, device number 28
[  449.939363][ T5882] usb 9-1: USB disconnect, device number 8
[  449.939363][    C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  449.939437][    C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  449.962454][    C1] ==================================================================
[  449.970631][    C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x28b/0x2f0
[  449.978545][    C1] Read of size 4 at addr ffff8880685c405c by task udevd/5194
[  449.985950][    C1] 
[  449.988364][    C1] CPU: 1 UID: 0 PID: 5194 Comm: udevd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  449.988406][    C1] Tainted: [L]=SOFTLOCKUP
[  449.988415][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  449.988438][    C1] Call Trace:
[  449.988501][    C1]  <IRQ>
[  449.988537][    C1]  dump_stack_lvl+0xe8/0x150
[  449.988632][    C1]  print_report+0xba/0x230
[  449.988663][    C1]  ? do_raw_spin_lock+0x28b/0x2f0
[  449.988713][    C1]  kasan_report+0x117/0x150
[  449.988766][    C1]  ? do_raw_spin_lock+0x28b/0x2f0
[  449.988790][    C1]  do_raw_spin_lock+0x28b/0x2f0
[  449.988812][    C1]  ? lock_acquire+0xf0/0x2e0
[  449.988839][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  449.988865][    C1]  _raw_spin_lock_irqsave+0x4c/0x60
[  449.988926][    C1]  __wake_up_common_lock+0x2f/0x1f0
[  449.988954][    C1]  __usb_hcd_giveback_urb+0x3b0/0x540
[  449.989015][    C1]  dummy_timer+0xbbd/0x45d0
[  449.989114][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  449.989161][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  449.989187][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  449.989218][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  449.989239][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  449.989268][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  449.989296][    C1]  __hrtimer_run_queues+0x53a/0xcc0
[  449.989337][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  449.989366][    C1]  ? ktime_get_update_offsets_now+0x3b2/0x3d0
[  449.989396][    C1]  hrtimer_run_softirq+0x182/0x5a0
[  449.989431][    C1]  handle_softirqs+0x22a/0x870
[  449.989467][    C1]  ? __irq_exit_rcu+0x5f/0x150
[  449.989499][    C1]  __irq_exit_rcu+0x5f/0x150
[  449.989525][    C1]  irq_exit_rcu+0x9/0x30
[  449.989551][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  449.989596][    C1]  </IRQ>
[  449.989630][    C1]  <TASK>
[  449.989639][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  449.989688][    C1] RIP: 0010:lock_acquire+0x20b/0x2e0
[  449.989716][    C1] Code: e9 30 ff ff ff e8 45 25 0d 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 c1 a2 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d fe 78 73
[  449.989735][    C1] RSP: 0018:ffffc90002e97898 EFLAGS: 00000282
[  449.989782][    C1] RAX: 1212478ae6472b00 RBX: 0000000000000246 RCX: 0000000000000046
[  449.989797][    C1] RDX: 000000005a44979c RSI: ffffffff8e1699c5 RDI: ffffffff8c27c900
[  449.989813][    C1] RBP: 0000000000000000 R08: ffffffff81767e95 R09: ffffffff8e75e5e0
[  449.989828][    C1] R10: ffffc90002e979f8 R11: ffffffff81b0c390 R12: 0000000000000002
[  449.989844][    C1] R13: ffffffff8e75e5e0 R14: 0000000000000000 R15: 0000000000000000
[  449.989861][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  449.989885][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  449.989919][    C1]  ? kasan_record_aux_stack+0xbd/0xd0
[  449.989950][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  449.989980][    C1]  unwind_next_frame+0xc2/0x23c0
[  449.990010][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  449.990043][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  449.990074][    C1]  ? kasan_save_stack+0x3e/0x60
[  449.990095][    C1]  ? kasan_record_aux_stack+0xbd/0xd0
[  449.990126][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  449.990155][    C1]  arch_stack_walk+0x11b/0x150
[  449.990196][    C1]  ? kasan_record_aux_stack+0xbd/0xd0
[  449.990229][    C1]  stack_trace_save+0xa9/0x100
[  449.990250][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  449.990277][    C1]  kasan_save_stack+0x3e/0x60
[  449.990298][    C1]  ? kasan_save_stack+0x3e/0x60
[  449.990319][    C1]  ? kasan_record_aux_stack+0xbd/0xd0
[  449.990373][    C1]  ? __phys_addr+0xd3/0x180
[  449.990396][    C1]  kasan_record_aux_stack+0xbd/0xd0
[  449.990427][    C1]  ? __pfx_slab_free_after_rcu_debug+0x10/0x10
[  449.990461][    C1]  call_rcu+0xee/0x890
[  449.990497][    C1]  kmem_cache_free+0x439/0x630
[  449.990521][    C1]  ? fput_close_sync+0x11f/0x240
[  449.990565][    C1]  fput_close_sync+0x11f/0x240
[  449.990596][    C1]  ? __pfx_fput_close_sync+0x10/0x10
[  449.990633][    C1]  __x64_sys_close+0x7e/0x110
[  449.990671][    C1]  do_syscall_64+0x14d/0xf80
[  449.990719][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.990740][    C1]  ? clear_bhb_loop+0x40/0x90
[  449.990765][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.990786][    C1] RIP: 0033:0x7f4a64915a67
[  449.990809][    C1] Code: 44 00 00 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 01 31 c9 e8 ca 19 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 61 b3 0d 00 f7 d8 64 89 02 b8
[  449.990828][    C1] RSP: 002b:00007fff6a6e3968 EFLAGS: 00000297 ORIG_RAX: 0000000000000003
[  449.990850][    C1] RAX: ffffffffffffffda RBX: 00005641ee9237a0 RCX: 00007f4a64915a67
[  449.990866][    C1] RDX: 00007f4a649efea0 RSI: 00005641ee94c580 RDI: 000000000000000c
[  449.990880][    C1] RBP: 00007f4a649efff0 R08: 0000000000000000 R09: 0000000000000000
[  449.990894][    C1] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000000
[  449.990906][    C1] R13: 3d45505954564544 R14: 3d5845444e494649 R15: 3d454d414e564544
[  449.990932][    C1]  </TASK>
[  449.990940][    C1] 
[  450.471518][    C1] Allocated by task 42:
[  450.475772][    C1]  kasan_save_track+0x3e/0x80
[  450.480461][    C1]  __kasan_kmalloc+0x93/0xb0
[  450.485062][    C1]  __kmalloc_cache_noprof+0x31c/0x660
[  450.490446][    C1]  xpad_probe+0x428/0x1fc0
[  450.495015][    C1]  usb_probe_interface+0x668/0xc90
[  450.500167][    C1]  really_probe+0x267/0xaf0
[  450.504764][    C1]  __driver_probe_device+0x18c/0x320
[  450.510064][    C1]  driver_probe_device+0x4f/0x240
[  450.515100][    C1]  __device_attach_driver+0x279/0x430
[  450.520488][    C1]  bus_for_each_drv+0x258/0x2f0
[  450.525349][    C1]  __device_attach+0x2c5/0x450
[  450.530126][    C1]  device_initial_probe+0xa1/0xd0
[  450.535165][    C1]  bus_probe_device+0x12a/0x220
[  450.540023][    C1]  device_add+0x7b6/0xb70
[  450.544367][    C1]  usb_set_configuration+0x1a87/0x2110
[  450.549842][    C1]  usb_generic_driver_probe+0x8d/0x150
[  450.555384][    C1]  usb_probe_device+0x1c4/0x3b0
[  450.560250][    C1]  really_probe+0x267/0xaf0
[  450.564780][    C1]  __driver_probe_device+0x18c/0x320
[  450.570095][    C1]  driver_probe_device+0x4f/0x240
[  450.575180][    C1]  __device_attach_driver+0x279/0x430
[  450.580569][    C1]  bus_for_each_drv+0x258/0x2f0
[  450.585427][    C1]  __device_attach+0x2c5/0x450
[  450.590201][    C1]  device_initial_probe+0xa1/0xd0
[  450.595238][    C1]  bus_probe_device+0x12a/0x220
[  450.600101][    C1]  device_add+0x7b6/0xb70
[  450.604446][    C1]  usb_new_device+0xa08/0x16f0
[  450.609219][    C1]  hub_event+0x2a1c/0x4f30
[  450.613644][    C1]  process_scheduled_works+0xb6e/0x18c0
[  450.619212][    C1]  worker_thread+0xa53/0xfc0
[  450.623818][    C1]  kthread+0x388/0x470
[  450.627922][    C1]  ret_from_fork+0x51e/0xb90
[  450.632524][    C1]  ret_from_fork_asm+0x1a/0x30
[  450.637330][    C1] 
[  450.639661][    C1] Freed by task 5882:
[  450.643646][    C1]  kasan_save_track+0x3e/0x80
[  450.648337][    C1]  kasan_save_free_info+0x46/0x50
[  450.653386][    C1]  __kasan_slab_free+0x5c/0x80
[  450.658176][    C1]  kfree+0x1c1/0x630
[  450.662087][    C1]  xpad_disconnect+0x350/0x480
[  450.666876][    C1]  usb_unbind_interface+0x26e/0x910
[  450.672097][    C1]  device_release_driver_internal+0x4d9/0x870
[  450.678189][    C1]  bus_remove_device+0x455/0x570
[  450.683147][    C1]  device_del+0x527/0x8f0
[  450.687489][    C1]  usb_disable_device+0x3d4/0x8d0
[  450.692524][    C1]  usb_disconnect+0x32f/0x990
[  450.697207][    C1]  hub_event+0x1cc9/0x4f30
[  450.701639][    C1]  process_scheduled_works+0xb6e/0x18c0
[  450.707202][    C1]  worker_thread+0xa53/0xfc0
[  450.711808][    C1]  kthread+0x388/0x470
[  450.715882][    C1]  ret_from_fork+0x51e/0xb90
[  450.720487][    C1]  ret_from_fork_asm+0x1a/0x30
[  450.725271][    C1] 
[  450.727611][    C1] The buggy address belongs to the object at ffff8880685c4000
[  450.727611][    C1]  which belongs to the cache kmalloc-1k of size 1024
[  450.741742][    C1] The buggy address is located 92 bytes inside of
[  450.741742][    C1]  freed 1024-byte region [ffff8880685c4000, ffff8880685c4400)
[  450.755544][    C1] 
[  450.757882][    C1] The buggy address belongs to the physical page:
[  450.764312][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880685c6000 pfn:0x685c0
[  450.774401][    C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  450.782910][    C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  450.791424][    C1] page_type: f5(slab)
[  450.795426][    C1] raw: 00fff00000000240 ffff88813fea5dc0 ffffea0000d00010 ffffea0001b8da10
[  450.804016][    C1] raw: ffff8880685c6000 000000080010000d 00000000f5000000 0000000000000000
[  450.812614][    C1] head: 00fff00000000240 ffff88813fea5dc0 ffffea0000d00010 ffffea0001b8da10
[  450.821292][    C1] head: ffff8880685c6000 000000080010000d 00000000f5000000 0000000000000000
[  450.829970][    C1] head: 00fff00000000003 ffffea0001a17001 00000000ffffffff 00000000ffffffff
[  450.838652][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  450.847330][    C1] page dumped because: kasan: bad access detected
[  450.853762][    C1] page_owner tracks the page as allocated
[  450.859484][    C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u8:1), ts 440529713350, free_ts 437976695032
[  450.880092][    C1]  post_alloc_hook+0x231/0x280
[  450.884905][    C1]  get_page_from_freelist+0x24dc/0x2580
[  450.890490][    C1]  __alloc_frozen_pages_noprof+0x18d/0x380
[  450.896310][    C1]  allocate_slab+0x77/0x660
[  450.900828][    C1]  refill_objects+0x331/0x3c0
[  450.905520][    C1]  __pcs_replace_empty_main+0x2e6/0x730
[  450.911085][    C1]  __kmalloc_noprof+0x474/0x760
[  450.915972][    C1]  ieee802_11_parse_elems_full+0x159/0x2ab0
[  450.922010][    C1]  ieee80211_ibss_rx_queued_mgmt+0x4ca/0x2cd0
[  450.928141][    C1]  ieee80211_iface_work+0x84e/0x1340
[  450.933441][    C1]  cfg80211_wiphy_work+0x2ab/0x4a0
[  450.938634][    C1]  process_scheduled_works+0xb6e/0x18c0
[  450.944189][    C1]  worker_thread+0xa53/0xfc0
[  450.948799][    C1]  kthread+0x388/0x470
[  450.952882][    C1]  ret_from_fork+0x51e/0xb90
[  450.957490][    C1]  ret_from_fork_asm+0x1a/0x30
[  450.962269][    C1] page last free pid 5183 tgid 5183 stack trace:
[  450.968601][    C1]  __free_frozen_pages+0xc2b/0xdb0
[  450.973763][    C1]  __slab_free+0x263/0x2b0
[  450.978218][    C1]  qlist_free_all+0x97/0x100
[  450.982829][    C1]  kasan_quarantine_reduce+0x148/0x160
[  450.988303][    C1]  __kasan_slab_alloc+0x22/0x80
[  450.993178][    C1]  kmem_cache_alloc_node_noprof+0x384/0x690
[  450.999076][    C1]  __alloc_skb+0x1d0/0x7d0
[  451.003586][    C1]  alloc_skb_with_frags+0xca/0x890
[  451.008756][    C1]  sock_alloc_send_pskb+0x878/0x990
[  451.013987][    C1]  unix_dgram_sendmsg+0x460/0x18e0
[  451.019201][    C1]  __sys_sendto+0x672/0x710
[  451.023785][    C1]  __x64_sys_sendto+0xde/0x100
[  451.028576][    C1]  do_syscall_64+0x14d/0xf80
[  451.033190][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.039101][    C1] 
[  451.041438][    C1] Memory state around the buggy address:
[  451.047133][    C1]  ffff8880685c3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  451.055211][    C1]  ffff8880685c3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  451.063286][    C1] >ffff8880685c4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  451.071357][    C1]                                                     ^
[  451.078312][    C1]  ffff8880685c4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  451.086394][    C1]  ffff8880685c4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  451.094468][    C1] ==================================================================
[  451.102553][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  451.109769][    C1] CPU: 1 UID: 0 PID: 5194 Comm: udevd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  451.120194][    C1] Tainted: [L]=SOFTLOCKUP
[  451.124526][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  451.134589][    C1] Call Trace:
[  451.137886][    C1]  <IRQ>
[  451.140741][    C1]  vpanic+0x56c/0xa60
[  451.144764][    C1]  ? __pfx_vpanic+0x10/0x10
[  451.149346][    C1]  panic+0xc5/0xd0
[  451.153106][    C1]  ? __pfx_panic+0x10/0x10
[  451.157546][    C1]  ? do_raw_spin_lock+0x28b/0x2f0
[  451.162590][    C1]  ? do_raw_spin_lock+0x28b/0x2f0
[  451.167640][    C1]  ? do_raw_spin_lock+0x28b/0x2f0
[  451.172690][    C1]  check_panic_on_warn+0x89/0xb0
[  451.177674][    C1]  ? do_raw_spin_lock+0x28b/0x2f0
[  451.182715][    C1]  end_report+0x73/0x180
[  451.186982][    C1]  ? do_raw_spin_lock+0x28b/0x2f0
[  451.192022][    C1]  kasan_report+0x128/0x150
[  451.196545][    C1]  ? do_raw_spin_lock+0x28b/0x2f0
[  451.201604][    C1]  do_raw_spin_lock+0x28b/0x2f0
[  451.206472][    C1]  ? lock_acquire+0xf0/0x2e0
[  451.211080][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  451.216474][    C1]  _raw_spin_lock_irqsave+0x4c/0x60
[  451.221694][    C1]  __wake_up_common_lock+0x2f/0x1f0
[  451.226910][    C1]  __usb_hcd_giveback_urb+0x3b0/0x540
[  451.232307][    C1]  dummy_timer+0xbbd/0x45d0
[  451.236852][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  451.241815][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  451.247200][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  451.252159][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  451.257974][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  451.262934][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  451.267899][    C1]  __hrtimer_run_queues+0x53a/0xcc0
[  451.273125][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  451.278884][    C1]  ? ktime_get_update_offsets_now+0x3b2/0x3d0
[  451.284980][    C1]  hrtimer_run_softirq+0x182/0x5a0
[  451.290121][    C1]  handle_softirqs+0x22a/0x870
[  451.294919][    C1]  ? __irq_exit_rcu+0x5f/0x150
[  451.299704][    C1]  __irq_exit_rcu+0x5f/0x150
[  451.304311][    C1]  irq_exit_rcu+0x9/0x30
[  451.308570][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  451.314217][    C1]  </IRQ>
[  451.317161][    C1]  <TASK>
[  451.320103][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  451.326098][    C1] RIP: 0010:lock_acquire+0x20b/0x2e0
[  451.331401][    C1] Code: e9 30 ff ff ff e8 45 25 0d 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 c1 a2 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d fe 78 73
[  451.351034][    C1] RSP: 0018:ffffc90002e97898 EFLAGS: 00000282
[  451.357123][    C1] RAX: 1212478ae6472b00 RBX: 0000000000000246 RCX: 0000000000000046
[  451.365105][    C1] RDX: 000000005a44979c RSI: ffffffff8e1699c5 RDI: ffffffff8c27c900
[  451.373089][    C1] RBP: 0000000000000000 R08: ffffffff81767e95 R09: ffffffff8e75e5e0
[  451.381079][    C1] R10: ffffc90002e979f8 R11: ffffffff81b0c390 R12: 0000000000000002
[  451.389082][    C1] R13: ffffffff8e75e5e0 R14: 0000000000000000 R15: 0000000000000000
[  451.397080][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  451.403264][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  451.408427][    C1]  ? kasan_record_aux_stack+0xbd/0xd0
[  451.413828][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  451.418967][    C1]  unwind_next_frame+0xc2/0x23c0
[  451.423929][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  451.429067][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  451.434203][    C1]  ? kasan_save_stack+0x3e/0x60
[  451.439067][    C1]  ? kasan_record_aux_stack+0xbd/0xd0
[  451.444461][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  451.450632][    C1]  arch_stack_walk+0x11b/0x150
[  451.455425][    C1]  ? kasan_record_aux_stack+0xbd/0xd0
[  451.460824][    C1]  stack_trace_save+0xa9/0x100
[  451.465634][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  451.471031][    C1]  kasan_save_stack+0x3e/0x60
[  451.475734][    C1]  ? kasan_save_stack+0x3e/0x60
[  451.480603][    C1]  ? kasan_record_aux_stack+0xbd/0xd0
[  451.486045][    C1]  ? __phys_addr+0xd3/0x180
[  451.490587][    C1]  kasan_record_aux_stack+0xbd/0xd0
[  451.495839][    C1]  ? __pfx_slab_free_after_rcu_debug+0x10/0x10
[  451.502037][    C1]  call_rcu+0xee/0x890
[  451.506149][    C1]  kmem_cache_free+0x439/0x630
[  451.510943][    C1]  ? fput_close_sync+0x11f/0x240
[  451.515921][    C1]  fput_close_sync+0x11f/0x240
[  451.520719][    C1]  ? __pfx_fput_close_sync+0x10/0x10
[  451.526047][    C1]  __x64_sys_close+0x7e/0x110
[  451.530756][    C1]  do_syscall_64+0x14d/0xf80
[  451.535375][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.541471][    C1]  ? clear_bhb_loop+0x40/0x90
[  451.546169][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.552078][    C1] RIP: 0033:0x7f4a64915a67
[  451.556524][    C1] Code: 44 00 00 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 01 31 c9 e8 ca 19 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 61 b3 0d 00 f7 d8 64 89 02 b8
[  451.576162][    C1] RSP: 002b:00007fff6a6e3968 EFLAGS: 00000297 ORIG_RAX: 0000000000000003
[  451.584597][    C1] RAX: ffffffffffffffda RBX: 00005641ee9237a0 RCX: 00007f4a64915a67
[  451.592593][    C1] RDX: 00007f4a649efea0 RSI: 00005641ee94c580 RDI: 000000000000000c
[  451.600584][    C1] RBP: 00007f4a649efff0 R08: 0000000000000000 R09: 0000000000000000
[  451.608572][    C1] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000000
[  451.616551][    C1] R13: 3d45505954564544 R14: 3d5845444e494649 R15: 3d454d414e564544
[  451.624539][    C1]  </TASK>
[  451.628206][    C1] Kernel Offset: disabled
[  451.632566][    C1] Rebooting in 86400 seconds..