last executing test programs:

14m30.384158993s ago: executing program 32 (id=1560):
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000009b80)=""/102392, 0x18ff8)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)

13m4.353533354s ago: executing program 33 (id=1811):
mkdir(0x0, 0x12)
fsopen(0x0, 0x1)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, &(0x7f0000000380)={0x1, 0x0, [{0xc0000102, 0x0, 0x103}]})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800)
recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

7m1.55957448s ago: executing program 4 (id=2953):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff030000000905820300"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="01"])

6m58.960341161s ago: executing program 4 (id=2961):
syz_emit_vhci(&(0x7f0000000740)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)

6m58.231815277s ago: executing program 4 (id=2965):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0)

6m57.172370901s ago: executing program 4 (id=2970):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0x1c, 0x4}, {}, {0x9c5560271e6e948f, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0xffffffffffffff26}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x240488d0)

6m55.65579982s ago: executing program 4 (id=2976):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x74, 0x0, &(0x7f00000004c0)=[@increfs_done={0x40106308, 0x2}, @request_death={0x400c630e, 0x1}, @dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r3}, @fd, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x1e}}, 0x0}}], 0x0, 0x0, 0x0})

6m49.112150325s ago: executing program 4 (id=3000):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100)={'#! ', './file0'}, 0xb)
cachestat(r3, &(0x7f0000000040)={0x0, 0x7}, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x7, 0x200000400002, 0x7, 0x8, 0x5}, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x20000023892)
syz_genetlink_get_family_id$batadv(0x0, r0)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
socketpair$unix(0x1, 0x1, 0x0, 0x0)
readlinkat(r7, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/6, 0x6)
fsmount(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000020000103000000000000000002000004000000000000000008000b0006000000aaee"], 0x24}, 0x1, 0x0, 0x0, 0x40480d4}, 0x20)

6m33.636400067s ago: executing program 34 (id=3000):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100)={'#! ', './file0'}, 0xb)
cachestat(r3, &(0x7f0000000040)={0x0, 0x7}, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x7, 0x200000400002, 0x7, 0x8, 0x5}, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x20000023892)
syz_genetlink_get_family_id$batadv(0x0, r0)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
socketpair$unix(0x1, 0x1, 0x0, 0x0)
readlinkat(r7, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/6, 0x6)
fsmount(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000020000103000000000000000002000004000000000000000008000b0006000000aaee"], 0x24}, 0x1, 0x0, 0x0, 0x40480d4}, 0x20)

5m15.048758911s ago: executing program 3 (id=3200):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0)

5m14.463184841s ago: executing program 3 (id=3204):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/78, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a80)={0x2, 0x0, [{0x8000000, 0x1000, &(0x7f0000001600)=""/4096}, {0x1, 0x7, &(0x7f0000000500)=""/7}]})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)

5m14.034559188s ago: executing program 3 (id=3206):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000001a80), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8040)

5m13.089850626s ago: executing program 3 (id=3209):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd4, 0x80, 0x0, 0x34f, 0x0, r0}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000200)}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r1, 0x47bc, 0x3000000, 0x0, 0x0, 0x0)

5m12.469692503s ago: executing program 3 (id=3213):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

5m11.849736235s ago: executing program 3 (id=3215):
r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

4m56.491176616s ago: executing program 35 (id=3215):
r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

3m58.783857697s ago: executing program 5 (id=3388):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000080)={0x0, 0x5, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m52.671481173s ago: executing program 5 (id=3395):
r0 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x7, 0x428b}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index, 0x2, &(0x7f00000004c0)="2b010ed9a2708e87eed9561f0432352e1295f4c90b262faee2ffca25ff8b5270c732a17edf76dec3dba5816f4bd691270a8fec16", 0x34})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

3m51.761177313s ago: executing program 5 (id=3398):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f00000000c0)=""/30, 0x1e)
read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc)

3m49.615027278s ago: executing program 5 (id=3404):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000080)={0x0, 0x5, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m46.456025513s ago: executing program 6 (id=3415):
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000600)=0x3)
sendfile(0xffffffffffffffff, r0, 0x0, 0x558410e9)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "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"}, 0x156)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fo', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a)

3m46.306393244s ago: executing program 5 (id=3416):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c3400000000001090224"], 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})

3m45.239959348s ago: executing program 6 (id=3419):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[@ANYBLOB], 0x38}}, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20001, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'pimreg0\x00', {0x2, 0x4e23, @remote}})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f00000002c0)=0x1)
close_range(r4, r4, 0x0)
write(r2, &(0x7f0000000340)="0a000300010000", 0x7)
recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0)

3m42.365957788s ago: executing program 5 (id=3423):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xffffffff, 0xfa11, 0xffffffff}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0xa000, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48})
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000000c0)={0xf0f041})
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000", 0xe)
recvmmsg(r4, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000011c0)}}], 0x1, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, &(0x7f0000000140))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x4170010, 0xffffffffffffffff, 0x3000)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

3m42.139128195s ago: executing program 6 (id=3424):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r1=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004)
r3 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

3m40.7467254s ago: executing program 6 (id=3427):
rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = gettid()
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0)
write$rfkill(r1, &(0x7f0000000300)={0xfdff, 0x2, 0x3, 0x1, 0x1}, 0x8)
write$rfkill(r1, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
sched_setattr(r0, &(0x7f0000000380)={0x38, 0x6, 0x10000010, 0x2, 0x80, 0xdc, 0x4, 0xd517, 0x1, 0x80}, 0x0)
capset(0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)

3m40.146523413s ago: executing program 6 (id=3429):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, 0x0, 0x0)
syz_emit_ethernet(0x6f, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x8}, 0x0, [0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x4, 0x0, 0x100000001, 0x4, 0x0, 0x0, 0xffffffffbfffffff, 0x0, 0x0, 0x19a, 0x3, 0x80000000, 0x3, 0x401, 0x0, 0xee, 0x0, 0x6, 0xfffffffffffffffe, 0x40, 0x0, 0x7f, 0x100200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xd, 0xd, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0xc, 0xfffffffffffff56c, 0x4, 0x4, 0x8, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x800, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x4, 0x80000000000000, 0x800000, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0x0, 0x100, 0x0, 0x69cf, 0x0, 0x0, 0x200000000, 0x2, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0xc0be, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x80000001, 0x0, 0x0, 0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4, 0x80]})

3m34.009679085s ago: executing program 6 (id=3430):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4)
write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]})

3m26.956573075s ago: executing program 36 (id=3423):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xffffffff, 0xfa11, 0xffffffff}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0xa000, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48})
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000000c0)={0xf0f041})
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000", 0xe)
recvmmsg(r4, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000011c0)}}], 0x1, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, &(0x7f0000000140))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x4170010, 0xffffffffffffffff, 0x3000)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

3m18.759377383s ago: executing program 37 (id=3430):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4)
write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]})

2m52.605078185s ago: executing program 7 (id=3515):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r1, 0x0, &(0x7f0000000040)="05", 0x1, 0xb})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0)
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x2, r1, 0x0, &(0x7f0000ae4000/0x1000)=nil, 0x1000, 0x8})

2m52.112915165s ago: executing program 7 (id=3517):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m51.241118384s ago: executing program 7 (id=3519):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = userfaultfd(0x801)
openat$qrtrtun(0xffffff9c, 0x0, 0x4200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c"], 0x50}}, 0x4000800)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

2m49.805198879s ago: executing program 7 (id=3521):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r1, 0x0, 0x0, 0x0, 0xb})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0xffffffff80000001})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7})

2m49.272773788s ago: executing program 7 (id=3523):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
waitid(0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)

2m41.915364793s ago: executing program 7 (id=3524):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)

2m25.922795909s ago: executing program 38 (id=3524):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)

1m1.756331684s ago: executing program 0 (id=3749):
syz_open_dev$loop(0x0, 0x7b, 0x40002)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1m0.261987038s ago: executing program 0 (id=3752):
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e00787680f600", 0x4, 0x2})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x60)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x7)

52.441023154s ago: executing program 0 (id=3767):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r0 = getpgrp(0x0)
r1 = syz_pidfd_open(r0, 0x0)
r2 = epoll_create(0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x34}}, 0x4040)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180))
r6 = gettid()
kcmp$KCMP_EPOLL_TFD(r0, r6, 0x7, r1, &(0x7f0000000040)={r2, r1})
syz_open_procfs$pagemap(r6, 0x0)

49.966613594s ago: executing program 0 (id=3769):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
capset(&(0x7f0000001680)={0x20071026}, 0x0)
ioctl(0xffffffffffffffff, 0x3, &(0x7f0000000040))
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40880}, 0x40011)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006500)={0x14, r2, 0x525, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x40)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x8)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0)

47.514413605s ago: executing program 0 (id=3776):
syz_open_dev$loop(0x0, 0x7b, 0x40002)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

46.490792685s ago: executing program 0 (id=3778):
syz_open_procfs(0x0, &(0x7f0000000480)='net/fib_triestat\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000640), 0x8)
name_to_handle_at(r2, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1000)

44.424022963s ago: executing program 2 (id=3782):
syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

42.718206245s ago: executing program 2 (id=3786):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
capset(&(0x7f0000001680)={0x20071026}, 0x0)
ioctl(0xffffffffffffffff, 0x3, &(0x7f0000000040))
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40880}, 0x40011)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000064c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r1, 0x0, 0x40)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x8)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0)

40.889541977s ago: executing program 2 (id=3792):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r0 = getpgrp(0x0)
r1 = syz_pidfd_open(r0, 0x0)
r2 = epoll_create(0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x34}}, 0x4040)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180))
r6 = gettid()
kcmp$KCMP_EPOLL_TFD(r0, r6, 0x7, r1, &(0x7f0000000040)={r2, r1})
syz_open_procfs$pagemap(r6, 0x0)

39.085409901s ago: executing program 2 (id=3794):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000b87000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x237, 0x8, 0x2, 0x0, 0x2})

37.178449131s ago: executing program 2 (id=3797):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r0)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02\\\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})

37.078499799s ago: executing program 1 (id=3799):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010019000000000000000c0000000c0000db6a60e4000300"], 0x0, 0x28}, 0x28)

36.475135397s ago: executing program 1 (id=3801):
r0 = socket(0x11, 0x3, 0x0)
setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r2=>0x0})
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r2, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f00000006c0)="000302000b00000000002d3922ff65b4355e953d23d254f09cd2893ffd966d3b07110a5fb45458ac3384f783ba19c9067555bde4f9ea32fe7d51103f1ee93a87f99eefefafbd19acd55e1abfbe5c299f", 0x50}], 0x1}, 0x858)

36.365206662s ago: executing program 2 (id=3802):
socket(0x40000000015, 0x5, 0x1677e13e)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYRES32, @ANYBLOB="07658f0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)

35.784880676s ago: executing program 1 (id=3804):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r0 = getpgrp(0x0)
r1 = syz_pidfd_open(r0, 0x0)
r2 = epoll_create(0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x34}}, 0x4040)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180))
r7 = gettid()
kcmp$KCMP_EPOLL_TFD(r0, r7, 0x7, r1, &(0x7f0000000040)={r2, r1})
syz_open_procfs$pagemap(r7, 0x0)

33.543129036s ago: executing program 1 (id=3806):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x24, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0xba7}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x60}}], 0x1, 0x20000000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x2, 0xfffffffffffffffd, 0x3, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x0, 0x2, 0x2, 0x700000000000000, 0x10006, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x1, 0x2, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x401, 0x1fd, 0x6, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x43, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x4, 0x20008, 0x2e2, 0x3, 0x6, 0x2, 0xfffffffffffffff9, 0x100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0x4, 0x8000000000000000, 0x2, 0x94f, 0xea5, 0x7fffffffffffffff, 0xa, 0xfffffffffffffffe, 0x9, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x0, 0x7, 0x7, 0xae8f, 0xfffffffffffffffc, 0xa, 0x20000000, 0x4000008, 0xdac, 0xe90, 0x7, 0x4c5d, 0xa7, 0xba00, 0x3, 0x7ff, 0x8, 0x1, 0x100, 0x4, 0xf, 0xfffffffffffffffc, 0x80000001, 0x5, 0x21, 0x8, 0xfffffffffffffffd, 0x401, 0x3, 0x7, 0x2, 0x79, 0xf, 0x10000, 0xf, 0x10000000002, 0x200, 0x3, 0xfffffffffffffffb, 0x4000, 0x4, 0xa, 0x6518, 0x9, 0x2, 0x100000001, 0x80, 0x3, 0xd, 0x4, 0xf, 0x9, 0x0, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1ffffffffffffffe]})
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x29})

30.98726156s ago: executing program 39 (id=3778):
syz_open_procfs(0x0, &(0x7f0000000480)='net/fib_triestat\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000640), 0x8)
name_to_handle_at(r2, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1000)

30.419117989s ago: executing program 1 (id=3810):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0x1000, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}}, 0x50)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b)
syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='x\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0})
getdents(r2, 0x0, 0x0)

29.528245789s ago: executing program 1 (id=3813):
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x101001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
listen(r0, 0x6)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
socket$phonet(0x23, 0x2, 0x1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0)
ftruncate(r3, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r4, r3, 0x0, 0x578410eb)

20.783555149s ago: executing program 40 (id=3802):
socket(0x40000000015, 0x5, 0x1677e13e)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYRES32, @ANYBLOB="07658f0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)

16.900523171s ago: executing program 8 (id=3827):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r0 = getpgrp(0x0)
r1 = syz_pidfd_open(r0, 0x0)
r2 = epoll_create(0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x34}}, 0x4040)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180))
r7 = gettid()
kcmp$KCMP_EPOLL_TFD(r0, r7, 0x7, r1, &(0x7f0000000040)={r2, r1})
syz_open_procfs$pagemap(r7, 0x0)

14.026907085s ago: executing program 41 (id=3813):
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x101001, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
listen(r0, 0x6)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
socket$phonet(0x23, 0x2, 0x1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0)
ftruncate(r3, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r4, r3, 0x0, 0x578410eb)

12.90143951s ago: executing program 8 (id=3829):
r0 = openat$uhid(0xffffff9c, &(0x7f00000000c0), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000006c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x58, 0xff, 0x6, 0xffffffec, 0x9, "a4"}}, 0x119)

11.8282322s ago: executing program 8 (id=3830):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0xba7}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x78}}], 0x1, 0x20000000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x29})

10.547060409s ago: executing program 8 (id=3831):
r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000600)=<r2=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}})
io_uring_enter(r0, 0x3516, 0xf400, 0x0, 0x0, 0x0)

6.362295272s ago: executing program 9 (id=3833):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f00000002c0), 0x3, 0x100)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x20004844}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)}, {&(0x7f0000000740)=""/221, 0xdd}, {&(0x7f0000000840)=""/189, 0xbd}], 0x3, &(0x7f0000000a00)=""/135, 0x87}, 0x40000101)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5.272863768s ago: executing program 9 (id=3834):
io_setup(0x1, 0x0)
r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000380)='./cgroup\x00', 0x2, 0x298f82})
flock(r1, 0x1)
flock(r0, 0x5)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00')
read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020)
io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

4.680887059s ago: executing program 9 (id=3835):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2004c001, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x42}, 0x1c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x2})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x80a0000})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000100)={0xeeee0000, 0x107000, 0x1})

4.202981445s ago: executing program 9 (id=3836):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a5002430102030109021200010000000009"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

969.319771ms ago: executing program 9 (id=3837):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)

673.884038ms ago: executing program 8 (id=3838):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0xba7}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x78}}], 0x1, 0x20000000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x29})

445.933634ms ago: executing program 9 (id=3839):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x1000000})

0s ago: executing program 8 (id=3840):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x7fffffffffffffff)

kernel console output (not intermixed with test programs):


[ 1325.449150][   T24] usb 3-1: USB disconnect, device number 120
[ 1325.712869][T15808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3226'.
[ 1325.723237][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3226'.
[ 1325.772602][T15808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3226'.
[ 1325.782784][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3226'.
[ 1325.959960][T15811] fuse: Unknown parameter 'fo0xffffffffffffffff'
[ 1326.453923][   T24] usb 8-1: USB disconnect, device number 3
[ 1326.510296][   T24] em28xx 8-1:0.0: Disconnecting em28xx
[ 1326.551262][   T24] em28xx 8-1:0.0: Freeing device
[ 1326.936316][   T31] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[ 1327.078472][   T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 1327.142235][   T31] usb 3-1: Using ep0 maxpacket: 32
[ 1327.156130][   T31] usb 3-1: config 0 has an invalid interface number: 119 but max is 0
[ 1327.166428][   T31] usb 3-1: config 0 has no interface number 0
[ 1327.200694][   T31] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1327.213568][   T31] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1327.226455][   T31] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1327.237692][   T31] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1327.287955][   T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 1327.299991][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1327.310325][   T31] usb 3-1: Product: syz
[ 1327.315450][   T31] usb 3-1: Manufacturer: syz
[ 1327.320877][   T31] usb 3-1: SerialNumber: syz
[ 1327.326097][   T24] usb 8-1: Using ep0 maxpacket: 32
[ 1327.339190][   T24] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1327.363490][   T24] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1327.374277][   T24] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1327.383438][   T24] usb 8-1: Product: syz
[ 1327.387966][   T24] usb 8-1: Manufacturer: syz
[ 1327.394857][   T24] usb 8-1: SerialNumber: syz
[ 1327.405085][   T31] usb 3-1: config 0 descriptor??
[ 1327.416862][    T9] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 1327.426830][   T31] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input53
[ 1327.470526][   T24] usb 8-1: config 0 descriptor??
[ 1327.517000][T15819] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1327.627766][    T9] usb 6-1: Using ep0 maxpacket: 8
[ 1327.630920][   T24] usb 3-1: USB disconnect, device number 121
[ 1327.692201][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1327.706622][    T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1327.718069][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1327.835961][    T9] usb 6-1: config 0 descriptor??
[ 1328.661986][    T9] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1
[ 1329.709073][T15828] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1329.889555][   T24] usb 8-1: USB disconnect, device number 4
[ 1330.299371][   T24] usb 6-1: USB disconnect, device number 62
[ 1330.378787][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1330.385634][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1330.579222][    T9] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[ 1330.758035][    T9] usb 3-1: Using ep0 maxpacket: 32
[ 1330.835175][    T9] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[ 1330.843867][    T9] usb 3-1: config 0 has no interface number 0
[ 1330.898697][    T9] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1330.939046][    T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1330.948972][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1330.957183][    T9] usb 3-1: Product: syz
[ 1330.961827][    T9] usb 3-1: Manufacturer: syz
[ 1330.966706][    T9] usb 3-1: SerialNumber: syz
[ 1330.992236][    T9] usb 3-1: config 0 descriptor??
[ 1331.022170][T15832] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1331.309213][T15832] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1331.566528][    T9] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[ 1331.607969][    T9] asix 3-1:0.188: probe with driver asix failed with error -61
[ 1332.124504][T15850] loop2: detected capacity change from 0 to 7
[ 1332.182330][T15850] Dev loop2: unable to read RDB block 7
[ 1332.189155][T15850]  loop2: unable to read partition table
[ 1332.219392][T15851] fuse: Unknown parameter 'fo0xffffffffffffffff'
[ 1332.239429][T15850] loop2: partition table beyond EOD, truncated
[ 1332.246472][T15850] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[ 1333.083754][T15864] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1333.392490][   T24] usb 3-1: USB disconnect, device number 122
[ 1333.418461][    T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[ 1333.617870][    T9] usb 7-1: Using ep0 maxpacket: 8
[ 1333.650043][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1333.662168][    T9] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1333.672677][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1333.805787][T15870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3250'.
[ 1333.834232][    T9] usb 7-1: config 0 descriptor??
[ 1334.096638][    T9] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1334.534492][    T9] usb 7-1: USB disconnect, device number 32
[ 1334.948107][   T24] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[ 1334.994926][T15880] loop2: detected capacity change from 0 to 7
[ 1335.006273][T15880] Dev loop2: unable to read RDB block 7
[ 1335.012794][T15880]  loop2: unable to read partition table
[ 1335.030858][T15880] loop2: partition table beyond EOD, truncated
[ 1335.037941][T15880] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[ 1335.146140][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1335.158880][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1335.169697][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1335.183524][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1335.321832][   T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1335.335203][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1335.344089][   T24] usb 3-1: Product: syz
[ 1335.349118][   T24] usb 3-1: Manufacturer: syz
[ 1335.354132][   T24] usb 3-1: SerialNumber: syz
[ 1335.486857][   T24] usb 3-1: config 0 descriptor??
[ 1335.743294][   T24] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[ 1335.867749][   T31] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[ 1335.968535][    T9] usb 3-1: USB disconnect, device number 123
[ 1336.053211][T15887] fuse: Unknown parameter 'fo0xffffffffffffffff'
[ 1336.065257][   T31] usb 7-1: Using ep0 maxpacket: 32
[ 1336.104903][   T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1336.115738][   T31] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[ 1336.188578][   T31] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1336.201528][   T31] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1336.211669][   T31] usb 7-1: Product: syz
[ 1336.216389][   T31] usb 7-1: Manufacturer: syz
[ 1336.221868][   T31] usb 7-1: SerialNumber: syz
[ 1336.268421][   T31] usb 7-1: config 0 descriptor??
[ 1336.560866][   T31] usb 7-1: USB disconnect, device number 33
[ 1337.006730][T15890] fuse: Bad value for 'fd'
[ 1337.758394][T15898] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3262'.
[ 1347.966015][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1347.981405][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1347.993660][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1348.023824][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1348.037815][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1348.321988][T15911] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1348.328407][T15911] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1348.377062][T15911] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1348.386541][T15911] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1348.592644][T15906] lo speed is unknown, defaulting to 1000
[ 1350.989394][T15922] fuse: Unknown parameter 'fo0xffffffffffffffff'
[ 1351.720968][   T31] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1352.487050][   T31] usb 8-1: Using ep0 maxpacket: 32
[ 1352.539640][   T31] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1352.595886][   T31] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1352.605883][   T31] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1352.616266][   T31] usb 8-1: Product: syz
[ 1352.621544][   T31] usb 8-1: Manufacturer: syz
[ 1352.627230][   T31] usb 8-1: SerialNumber: syz
[ 1352.807778][   T31] usb 8-1: config 0 descriptor??
[ 1352.838101][T15925] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1353.182468][   T31] usb 8-1: USB disconnect, device number 5
[ 1353.225988][T15933] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3275'.
[ 1353.581744][T15906] chnl_net:caif_netlink_parms(): no params data found
[ 1354.049277][T15938] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3277'.
[ 1355.127739][   T31] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1355.350329][   T31] usb 8-1: Using ep0 maxpacket: 32
[ 1355.609399][T15906] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1355.617015][T15906] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1355.657802][   T31] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1355.688353][T15906] bridge_slave_0: entered allmulticast mode
[ 1355.696928][T15906] bridge_slave_0: entered promiscuous mode
[ 1355.733596][   T31] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1355.744569][   T31] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1355.753985][   T31] usb 8-1: Product: syz
[ 1355.761759][   T31] usb 8-1: Manufacturer: syz
[ 1355.766913][   T31] usb 8-1: SerialNumber: syz
[ 1355.808965][T15959] fuse: Unknown parameter 'fo0xffffffffffffffff'
[ 1355.855430][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1355.915047][   T31] usb 8-1: config 0 descriptor??
[ 1355.957075][T15963] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3287'.
[ 1355.982536][T15954] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1356.002389][T15906] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1356.012431][T15906] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1356.030720][T15906] bridge_slave_1: entered allmulticast mode
[ 1356.074057][T15906] bridge_slave_1: entered promiscuous mode
[ 1356.185674][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1356.448430][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1356.945190][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1357.072875][T15906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1357.195801][T15906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1357.342275][T15974] fuse: Unknown parameter '0x0000000000000003'
[ 1357.576219][T15906] team0: Port device team_slave_0 added
[ 1357.772136][T15906] team0: Port device team_slave_1 added
[ 1358.240272][   T24] usb 8-1: USB disconnect, device number 6
[ 1358.360893][T15906] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1358.369586][T15906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1358.399060][T15906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1358.648097][T15906] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1358.655700][T15906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1358.685064][T15906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1358.775243][   T13] bridge_slave_1: left allmulticast mode
[ 1358.782167][   T13] bridge_slave_1: left promiscuous mode
[ 1358.790042][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1358.908879][   T13] bridge_slave_0: left allmulticast mode
[ 1358.915614][   T13] bridge_slave_0: left promiscuous mode
[ 1358.923034][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1359.016938][T15994] fuse: Unknown parameter 'fo0xffffffffffffffff'
[ 1359.289433][T15996] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3298'.
[ 1360.341944][T16009] fuse: Unknown parameter '0x0000000000000003'
[ 1360.555319][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1360.615171][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1360.636161][   T13] bond0 (unregistering): Released all slaves
[ 1361.107918][    T9] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[ 1361.302307][T16016] loop2: detected capacity change from 0 to 7
[ 1361.315963][    T9] usb 3-1: Using ep0 maxpacket: 32
[ 1361.363436][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1361.407966][T16016] Dev loop2: unable to read RDB block 7
[ 1361.414328][T16016]  loop2: unable to read partition table
[ 1361.460691][    T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1361.471208][    T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1361.480623][    T9] usb 3-1: Product: syz
[ 1361.485261][    T9] usb 3-1: Manufacturer: syz
[ 1361.492671][    T9] usb 3-1: SerialNumber: syz
[ 1361.499727][T16016] loop2: partition table beyond EOD, truncated
[ 1361.506766][T16016] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[ 1361.535578][T15906] hsr_slave_0: entered promiscuous mode
[ 1361.627244][    T9] usb 3-1: config 0 descriptor??
[ 1361.637825][T15906] hsr_slave_1: entered promiscuous mode
[ 1361.693069][T16014] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1361.731937][T15906] debugfs: 'hsr0' already exists in 'hsr'
[ 1361.738555][T15906] Cannot create hsr debugfs directory
[ 1362.060934][   T31] usb 3-1: USB disconnect, device number 124
[ 1362.348844][T16026] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3310'.
[ 1362.397906][   T24] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1362.622642][   T24] usb 8-1: Using ep0 maxpacket: 32
[ 1362.683179][   T24] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1362.758526][   T24] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1362.771413][   T24] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1362.782673][   T24] usb 8-1: Product: syz
[ 1362.787645][   T24] usb 8-1: Manufacturer: syz
[ 1362.793765][   T24] usb 8-1: SerialNumber: syz
[ 1362.808187][   T13] hsr_slave_0: left promiscuous mode
[ 1362.873494][   T13] hsr_slave_1: left promiscuous mode
[ 1362.894782][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1362.903360][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1362.935370][   T24] usb 8-1: config 0 descriptor??
[ 1362.951369][T16024] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1362.998474][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1363.006537][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1363.133289][T16031] fuse: Unknown parameter 'fo0xffffffffffffffff'
[ 1363.178940][   T13] veth1_macvtap: left promiscuous mode
[ 1363.183516][    T9] usb 8-1: USB disconnect, device number 7
[ 1363.200770][   T13] veth0_macvtap: left promiscuous mode
[ 1363.222404][   T13] veth1_vlan: left promiscuous mode
[ 1363.245418][   T13] veth0_vlan: left promiscuous mode
[ 1363.350077][T16036] fuse: Unknown parameter '0x0000000000000003'
[ 1364.592158][T16047] loop2: detected capacity change from 0 to 7
[ 1364.640078][T16047] Dev loop2: unable to read RDB block 7
[ 1364.647126][T16047]  loop2: unable to read partition table
[ 1364.692320][T16047] loop2: partition table beyond EOD, truncated
[ 1364.700957][T16047] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[ 1365.590787][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1365.688126][T16060] program syz.6.3325 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1365.731023][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1366.093193][T16065] fuse: Unknown parameter 'fo0xffffffffffffffff'
[ 1366.542474][    T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1366.741204][    T9] usb 8-1: Using ep0 maxpacket: 32
[ 1366.786253][    T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1366.871554][    T9] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1366.882780][    T9] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1366.893149][    T9] usb 8-1: Product: syz
[ 1366.898253][    T9] usb 8-1: Manufacturer: syz
[ 1366.903308][    T9] usb 8-1: SerialNumber: syz
[ 1367.075255][    T9] usb 8-1: config 0 descriptor??
[ 1367.129972][T16067] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1367.217793][   T24] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1367.437711][   T24] usb 6-1: Using ep0 maxpacket: 16
[ 1367.492308][   T24] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1367.504390][   T24] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[ 1367.517926][   T24] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1367.534074][   T24] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1367.548672][    T9] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[ 1367.577726][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1367.587898][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1367.596772][   T24] usb 6-1: Product: syz
[ 1367.602205][   T24] usb 6-1: Manufacturer: syz
[ 1367.607013][   T24] usb 6-1: SerialNumber: syz
[ 1367.831945][T16078] loop2: detected capacity change from 0 to 7
[ 1367.862502][T16078] Dev loop2: unable to read RDB block 7
[ 1367.869245][T16078]  loop2: unable to read partition table
[ 1367.901051][T16078] loop2: partition table beyond EOD, truncated
[ 1367.908389][T16078] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[ 1368.064817][   T24] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 63 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[ 1368.173364][    T9] usb 3-1: Using ep0 maxpacket: 32
[ 1368.230885][T15779] usb 6-1: USB disconnect, device number 63
[ 1368.254187][    T9] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5
[ 1368.264128][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1368.273866][    T9] usb 3-1: Product: syz
[ 1368.278522][    T9] usb 3-1: Manufacturer: syz
[ 1368.283756][    T9] usb 3-1: SerialNumber: syz
[ 1368.301736][T15779] usblp1: removed
[ 1368.383024][T15906] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1368.536112][    T9] usb 3-1: config 0 descriptor??
[ 1368.575326][T15906] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1368.593905][    T9] hub 3-1:0.0: bad descriptor, ignoring hub
[ 1368.602343][    T9] hub 3-1:0.0: probe with driver hub failed with error -5
[ 1368.709180][T15906] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1368.724360][    T9] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[ 1368.939770][T15906] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1368.988233][    T9] gspca_vc032x: reg_w err -71
[ 1368.993396][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1369.000361][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1369.006118][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1369.013032][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1369.019132][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1369.024902][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1369.031115][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1369.036740][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1369.043210][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1369.049010][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1369.054673][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1369.060711][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1369.066346][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1369.074307][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1369.080637][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1369.086097][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1369.091728][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1369.097157][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1369.102916][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[ 1369.108438][    T9] gspca_vc032x: Unknown sensor...
[ 1369.113942][    T9] vc032x 3-1:0.0: probe with driver vc032x failed with error -22
[ 1369.288979][   T24] usb 8-1: USB disconnect, device number 8
[ 1369.500626][    T9] usb 3-1: USB disconnect, device number 125
[ 1370.475735][T15906] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1370.758693][ T5847] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1370.771885][T15906] 8021q: adding VLAN 0 to HW filter on device team0
[ 1370.952756][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1370.960725][ T6136] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1371.052201][T16111] fuse: Unknown parameter 'fo0xffffffffffffffff'
[ 1371.089961][ T5847] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1371.099712][ T5847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1371.108201][ T5847] usb 8-1: Product: syz
[ 1371.112554][ T5847] usb 8-1: Manufacturer: syz
[ 1371.118952][ T5847] usb 8-1: SerialNumber: syz
[ 1371.244550][T14651] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1371.252303][T14651] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1371.340715][ T5847] usb 8-1: config 0 descriptor??
[ 1371.511962][ T5847] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1371.521534][T16116] loop2: detected capacity change from 0 to 7
[ 1371.585124][T16116] Dev loop2: unable to read RDB block 7
[ 1371.591869][T16116]  loop2: unable to read partition table
[ 1371.670183][T16116] loop2: partition table beyond EOD, truncated
[ 1371.677035][T16116] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[ 1372.192718][ T5847] gspca_sunplus: reg_r err -71
[ 1372.200400][ T5847] sunplus 8-1:0.0: probe with driver sunplus failed with error -71
[ 1372.329920][ T5847] usb 8-1: USB disconnect, device number 9
[ 1372.453521][T16123] loop7: detected capacity change from 0 to 16384
[ 1372.771704][ T5847] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1372.813914][T16129] loop7: detected capacity change from 16384 to 0
[ 1372.967197][ T5847] usb 6-1: Using ep0 maxpacket: 32
[ 1372.996040][ T5847] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1373.082563][ T5847] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1373.092468][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1373.101255][ T5847] usb 6-1: Product: syz
[ 1373.105604][ T5847] usb 6-1: Manufacturer: syz
[ 1373.110584][ T5847] usb 6-1: SerialNumber: syz
[ 1373.220266][ T5847] usb 6-1: config 0 descriptor??
[ 1373.229362][T16126] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1373.538785][   T24] usb 6-1: USB disconnect, device number 64
[ 1375.141367][T15906] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1375.186312][T16157] fuse: Unknown parameter 'fo0xffffffffffffffff'
[ 1376.912774][ T1090] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1377.189896][ T1090] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1377.242018][T16166] loop2: detected capacity change from 0 to 7
[ 1377.298013][T16166] Dev loop2: unable to read RDB block 7
[ 1377.298829][T15779] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[ 1377.304583][T16166]  loop2: unable to read partition table
[ 1377.394044][ T1090] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1377.425067][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3355'.
[ 1377.436017][T16166] loop2: partition table beyond EOD, truncated
[ 1377.444011][T16166] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[ 1377.547730][T15779] usb 7-1: Using ep0 maxpacket: 16
[ 1377.579466][T16173] netlink: 'syz.5.3356': attribute type 10 has an invalid length.
[ 1377.588994][T16173] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3356'.
[ 1377.604277][ T1090] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1377.624272][T15779] usb 7-1: config index 0 descriptor too short (expected 65315, got 36)
[ 1377.634195][T15779] usb 7-1: config 0 has too many interfaces: 239, using maximum allowed: 32
[ 1377.646040][T15779] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 239
[ 1377.716086][T15779] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1377.732836][T15779] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1377.744063][T15779] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1377.758739][T15779] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1377.770950][T16173] batadv0: entered promiscuous mode
[ 1377.780013][T16173] batadv0: entered allmulticast mode
[ 1377.801060][T16173] bridge0: port 3(batadv0) entered blocking state
[ 1377.809275][T16173] bridge0: port 3(batadv0) entered disabled state
[ 1377.996356][T15779] usb 7-1: config 0 descriptor??
[ 1378.009690][ T6136] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1378.020520][ T6136] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1378.551272][T15779] usbhid 7-1:0.0: can't add hid device: -71
[ 1378.560072][T15779] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1378.587127][ T1090] bridge_slave_1: left allmulticast mode
[ 1378.597966][ T1090] bridge_slave_1: left promiscuous mode
[ 1378.605090][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1378.721197][T15779] usb 7-1: USB disconnect, device number 34
[ 1378.732678][ T1090] bridge_slave_0: left allmulticast mode
[ 1378.739289][ T1090] bridge_slave_0: left promiscuous mode
[ 1378.746203][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1379.529158][T15779] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[ 1379.766849][T15779] usb 3-1: Using ep0 maxpacket: 32
[ 1379.815549][T15779] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1379.876718][T15779] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1379.888784][T15779] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1379.899096][T15779] usb 3-1: Product: syz
[ 1379.903966][T15779] usb 3-1: Manufacturer: syz
[ 1379.915965][T15779] usb 3-1: SerialNumber: syz
[ 1379.952961][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1379.994765][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1380.032037][ T1090] bond0 (unregistering): Released all slaves
[ 1380.064979][T15779] usb 3-1: config 0 descriptor??
[ 1380.098604][T16191] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1380.149295][T16197] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3364'.
[ 1380.410078][T16205] fuse: Unknown parameter 'fo0xffffffffffffffff'
[ 1381.394774][ T1090] hsr_slave_0: left promiscuous mode
[ 1381.424984][ T1090] hsr_slave_1: left promiscuous mode
[ 1381.449651][T16210] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3366'.
[ 1381.828506][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1381.883590][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1382.375236][ T5847] usb 3-1: USB disconnect, device number 126
[ 1382.395794][T16215] loop2: detected capacity change from 0 to 7
[ 1382.484952][T14700] Dev loop2: unable to read RDB block 7
[ 1382.492810][T14700]  loop2: unable to read partition table
[ 1382.544632][T14700] loop2: partition table beyond EOD, truncated
[ 1382.576841][T16215] Dev loop2: unable to read RDB block 7
[ 1382.584671][T16215]  loop2: unable to read partition table
[ 1382.629762][T16215] loop2: partition table beyond EOD, truncated
[ 1382.636519][T16215] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[ 1383.912148][ T1090] team0 (unregistering): Port device team_slave_1 removed
[ 1384.073712][T15779] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[ 1384.208351][ T1090] team0 (unregistering): Port device team_slave_0 removed
[ 1384.305965][T15779] usb 7-1: device descriptor read/64, error -71
[ 1384.602837][T15779] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 1384.808554][T15779] usb 7-1: device descriptor read/64, error -71
[ 1384.926751][T15779] usb usb7-port1: attempt power cycle
[ 1385.284044][T16231] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[ 1385.293923][T16231] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[ 1385.304128][T16231] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1385.361417][   T30] audit: type=1800 audit(1769293230.517:112): pid=16231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3370" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[ 1385.416167][T15779] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[ 1385.493529][T15779] usb 7-1: device descriptor read/8, error -71
[ 1385.869276][T15779] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[ 1385.930700][T15779] usb 7-1: device descriptor read/8, error -71
[ 1386.044069][T15779] usb usb7-port1: unable to enumerate USB device
[ 1386.166495][T15906] veth0_vlan: entered promiscuous mode
[ 1386.311885][T15906] veth1_vlan: entered promiscuous mode
[ 1386.407912][T16241] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3376'.
[ 1386.490465][T16244] fuse: Unknown parameter 'fo0xffffffffffffffff00000000000000000000'
[ 1386.529037][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3378'.
[ 1386.737794][T10061] bridge_slave_1: left allmulticast mode
[ 1386.743904][T10061] bridge_slave_1: left promiscuous mode
[ 1386.750843][T10061] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1386.855133][T10061] bridge_slave_0: left allmulticast mode
[ 1386.861744][T10061] bridge_slave_0: left promiscuous mode
[ 1386.869619][T10061] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1387.457780][   T24] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[ 1387.648130][   T24] usb 7-1: Using ep0 maxpacket: 32
[ 1387.682345][   T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1387.773166][   T24] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1387.784040][   T24] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1387.794605][   T24] usb 7-1: Product: syz
[ 1387.800623][   T24] usb 7-1: Manufacturer: syz
[ 1387.806606][   T24] usb 7-1: SerialNumber: syz
[ 1387.920641][   T24] usb 7-1: config 0 descriptor??
[ 1387.975924][T16252] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1387.985323][T10061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1388.070871][T10061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1388.129863][T10061] bond0 (unregistering): Released all slaves
[ 1388.263602][   T24] usb 7-1: USB disconnect, device number 39
[ 1388.349350][T15906] veth0_macvtap: entered promiscuous mode
[ 1388.464685][T15906] veth1_macvtap: entered promiscuous mode
[ 1392.812339][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1394.843020][T15906] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1397.313171][T15906] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1397.429872][T14836] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1397.562459][T14836] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1397.648158][T10061] hsr_slave_0: left promiscuous mode
[ 1397.701722][T10061] hsr_slave_1: left promiscuous mode
[ 1397.769978][T10061] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1397.800273][T10061] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1397.828647][T15779] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 1398.058739][T15779] usb 6-1: Using ep0 maxpacket: 8
[ 1398.214874][T15779] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1398.225032][T15779] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1398.233260][T15779] usb 6-1: Product: syz
[ 1398.237878][T15779] usb 6-1: Manufacturer: syz
[ 1398.242742][T15779] usb 6-1: SerialNumber: syz
[ 1398.381814][T16291] fuse: Unknown parameter 'fo0xffffffffffffffff00000000000000000000'
[ 1398.500964][T15779] usb 6-1: config 0 descriptor??
[ 1398.755990][T15779] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1398.845542][T16295] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3390'.
[ 1399.008655][T15779] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1399.799127][T10061] team0 (unregistering): Port device team_slave_1 removed
[ 1400.249129][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1400.259848][ T5794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1400.274912][ T5794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1400.296392][ T5794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1400.331124][T10061] team0 (unregistering): Port device team_slave_0 removed
[ 1400.342738][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1400.429690][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1400.440381][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1400.450344][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1400.464961][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1400.486664][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1400.898615][T15779] usb 6-1: USB disconnect, device number 65
[ 1401.188706][T16312] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1401.194829][T16312] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 1401.482200][T14836] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1401.569021][T14836] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1402.427801][   T24] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1402.651323][   T24] usb 6-1: Using ep0 maxpacket: 32
[ 1402.673185][   T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1402.701453][   T24] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1402.711123][   T24] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1402.719864][   T24] usb 6-1: Product: syz
[ 1402.724221][   T24] usb 6-1: Manufacturer: syz
[ 1402.730083][   T24] usb 6-1: SerialNumber: syz
[ 1402.843779][   T24] usb 6-1: config 0 descriptor??
[ 1402.919484][T16322] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1403.225851][   T24] usb 6-1: USB disconnect, device number 66
[ 1403.553383][T16341] fuse: Unknown parameter 'fo0xffffffffffffffff00000000000000000000'
[ 1403.724968][ T6136] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1404.060541][ T6136] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1404.288466][ T6136] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1404.342049][T16304] chnl_net:caif_netlink_parms(): no params data found
[ 1404.478116][   T24] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 1404.512952][ T6136] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1404.687698][   T24] usb 6-1: Using ep0 maxpacket: 8
[ 1404.779854][   T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1404.789478][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1404.797935][   T24] usb 6-1: Product: syz
[ 1404.802267][   T24] usb 6-1: Manufacturer: syz
[ 1404.808332][   T24] usb 6-1: SerialNumber: syz
[ 1404.954011][   T24] usb 6-1: config 0 descriptor??
[ 1405.259306][   T24] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1405.425399][ T6136] bridge_slave_1: left allmulticast mode
[ 1405.431638][ T6136] bridge_slave_1: left promiscuous mode
[ 1405.438895][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1405.487892][   T24] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1405.568822][ T6136] bridge_slave_0: left allmulticast mode
[ 1405.574786][ T6136] bridge_slave_0: left promiscuous mode
[ 1405.581956][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1405.982711][T16374] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3409'.
[ 1406.803278][ T6136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1406.829468][ T6136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1406.858325][ T6136] bond0 (unregistering): Released all slaves
[ 1406.978189][    T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1407.132687][ T6136] hsr_slave_0: left promiscuous mode
[ 1407.164713][    T9] usb 8-1: Using ep0 maxpacket: 32
[ 1407.186070][ T6136] hsr_slave_1: left promiscuous mode
[ 1407.216750][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1407.224951][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1407.318175][    T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1407.329769][ T5847] usb 6-1: USB disconnect, device number 67
[ 1407.376506][    T9] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1407.386781][    T9] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1407.395675][    T9] usb 8-1: Product: syz
[ 1407.400134][    T9] usb 8-1: Manufacturer: syz
[ 1407.404912][    T9] usb 8-1: SerialNumber: syz
[ 1407.414792][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1407.422743][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1407.500485][    T9] usb 8-1: config 0 descriptor??
[ 1407.512500][T16384] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1407.545829][ T6136] veth1_macvtap: left promiscuous mode
[ 1407.572441][ T6136] veth0_macvtap: left promiscuous mode
[ 1407.590894][ T6136] veth1_vlan: left promiscuous mode
[ 1407.597179][ T6136] veth0_vlan: left promiscuous mode
[ 1407.612153][T16395] fuse: Unknown parameter 'fo0xffffffffffffffff00000000000000000000'
[ 1407.785485][    T9] usb 8-1: USB disconnect, device number 10
[ 1407.840934][ T5847] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 1408.017788][ T5847] usb 6-1: Using ep0 maxpacket: 32
[ 1408.065966][ T5847] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1408.076480][ T5847] usb 6-1: config 0 has no interfaces?
[ 1408.083844][ T5847] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1408.093405][ T5847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1408.141003][ T5847] usb 6-1: config 0 descriptor??
[ 1408.442649][T16394] 9p: Bad value for 'rfdno'
[ 1408.481969][ T5847] usb 6-1: USB disconnect, device number 68
[ 1409.014470][T16409] Bluetooth: MGMT ver 1.23
[ 1411.766268][ T6136] team0 (unregistering): Port device team_slave_1 removed
[ 1411.842056][T16420] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1411.882152][ T6136] team0 (unregistering): Port device team_slave_0 removed
[ 1411.900539][T16422] vivid-001: disconnect
[ 1412.200486][T16423] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3424'.
[ 1412.539759][ T5847] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 1412.699626][T16415] vivid-001: reconnect
[ 1412.787673][ T5847] usb 3-1: Using ep0 maxpacket: 8
[ 1412.854909][ T5847] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1412.864558][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1412.873058][ T5847] usb 3-1: Product: syz
[ 1412.877526][ T5847] usb 3-1: Manufacturer: syz
[ 1412.882281][ T5847] usb 3-1: SerialNumber: syz
[ 1413.030944][ T5847] usb 3-1: config 0 descriptor??
[ 1413.272208][T16304] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1413.280057][T16304] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1413.348866][T16304] bridge_slave_0: entered allmulticast mode
[ 1413.350356][ T5847] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1413.385268][T16304] bridge_slave_0: entered promiscuous mode
[ 1413.465037][T16304] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1413.472650][T16304] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1413.541504][T16304] bridge_slave_1: entered allmulticast mode
[ 1413.549805][ T5847] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1413.572231][T16304] bridge_slave_1: entered promiscuous mode
[ 1413.676248][T16437] binder: 16433:16437 ioctl c0306201 0 returned -14
[ 1419.598002][ T5847] usb 3-1: USB disconnect, device number 127
[ 1419.712905][T16304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1419.834018][T16304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1420.174643][T16304] team0: Port device team_slave_0 added
[ 1420.240759][T16304] team0: Port device team_slave_1 added
[ 1420.486647][T16448] loop7: detected capacity change from 0 to 16384
[ 1420.578411][T16304] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1420.585548][T16304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1420.611951][T16304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1420.649330][T16448] loop7: detected capacity change from 16384 to 0
[ 1420.774591][T16304] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1420.783686][T16304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1420.810880][T16304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1421.801618][ T5847] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[ 1423.389314][ T5847] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1423.399357][ T5847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1423.407793][ T5847] usb 8-1: Product: syz
[ 1423.412209][ T5847] usb 8-1: Manufacturer: syz
[ 1423.416982][ T5847] usb 8-1: SerialNumber: syz
[ 1423.504000][T16304] hsr_slave_0: entered promiscuous mode
[ 1423.559268][T16304] hsr_slave_1: entered promiscuous mode
[ 1423.581620][ T5847] usb 8-1: config 0 descriptor??
[ 1423.768851][ T5847] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1424.113824][ T5847] gspca_sunplus: reg_w_riv err -71
[ 1424.119574][ T5847] sunplus 8-1:0.0: probe with driver sunplus failed with error -71
[ 1424.213758][ T5847] usb 8-1: USB disconnect, device number 11
[ 1424.283942][T16463] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3436'.
[ 1425.529530][T15779] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1425.737801][T15779] usb 3-1: Using ep0 maxpacket: 16
[ 1425.760274][T15779] usb 3-1: config 1 has an invalid interface number: 170 but max is 0
[ 1425.769170][T15779] usb 3-1: config 1 has no interface number 0
[ 1425.785341][T15779] usb 3-1: config 1 interface 170 altsetting 2 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[ 1425.796877][T15779] usb 3-1: config 1 interface 170 altsetting 2 endpoint 0xA has invalid maxpacket 1024, setting to 64
[ 1425.810916][T15779] usb 3-1: config 1 interface 170 altsetting 2 bulk endpoint 0xC has invalid maxpacket 911
[ 1425.821242][T15779] usb 3-1: config 1 interface 170 has no altsetting 0
[ 1425.844810][T15779] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=5f.38
[ 1425.854739][T15779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1425.863217][T15779] usb 3-1: Product: syz
[ 1425.867918][T15779] usb 3-1: Manufacturer: syz
[ 1425.872603][T15779] usb 3-1: SerialNumber: syz
[ 1425.954853][T16473] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1426.266567][T15779] radio-si470x 3-1:1.170: could not find interrupt in endpoint
[ 1426.274785][T15779] radio-si470x 3-1:1.170: probe with driver radio-si470x failed with error -5
[ 1426.394740][T15779] usbhid 3-1:1.170: couldn't find an input interrupt endpoint
[ 1426.487155][T15779] usb 3-1: USB disconnect, device number 2
[ 1426.520149][T16304] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1426.604626][T16304] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1426.695448][T16304] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1426.705816][   T24] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[ 1426.828356][T16304] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1426.899893][   T24] usb 8-1: Using ep0 maxpacket: 8
[ 1426.985929][   T24] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1426.995573][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1427.004019][   T24] usb 8-1: Product: syz
[ 1427.008488][   T24] usb 8-1: Manufacturer: syz
[ 1427.013243][   T24] usb 8-1: SerialNumber: syz
[ 1427.140425][   T24] usb 8-1: config 0 descriptor??
[ 1427.388211][   T24] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1428.020928][   T24] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1428.158897][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1428.189189][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1428.209557][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1428.257808][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1428.278860][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1428.318764][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1428.329174][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1428.363269][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1428.386739][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1428.406137][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1428.692096][T16304] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1428.900631][T16304] 8021q: adding VLAN 0 to HW filter on device team0
[ 1429.132602][T16239] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1429.140273][T16239] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1429.324673][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1429.332330][ T6046] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1429.498966][T16498] usb 8-1: USB disconnect, device number 12
[ 1430.518744][   T51] Bluetooth: hci2: command tx timeout
[ 1431.351373][T16522] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3447'.
[ 1431.849880][T16492] chnl_net:caif_netlink_parms(): no params data found
[ 1432.180888][T16304] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1432.601189][   T51] Bluetooth: hci2: command tx timeout
[ 1433.437658][T16498] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 1433.644711][T16498] usb 8-1: Using ep0 maxpacket: 8
[ 1433.718850][T16492] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1433.726507][T16492] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1433.729209][T16498] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1433.742976][T16498] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1433.751607][T16498] usb 8-1: Product: syz
[ 1433.755940][T16498] usb 8-1: Manufacturer: syz
[ 1433.760797][T16498] usb 8-1: SerialNumber: syz
[ 1433.798103][T16492] bridge_slave_0: entered allmulticast mode
[ 1433.811826][T16498] usb 8-1: config 0 descriptor??
[ 1433.831166][T16492] bridge_slave_0: entered promiscuous mode
[ 1433.903521][T16492] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1433.912610][T16492] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1433.978381][T16492] bridge_slave_1: entered allmulticast mode
[ 1434.002907][T16492] bridge_slave_1: entered promiscuous mode
[ 1434.095784][T16498] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1434.462376][T16492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1434.569065][T16492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1434.687623][   T51] Bluetooth: hci2: command tx timeout
[ 1434.832603][T16498] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1434.905915][T16492] team0: Port device team_slave_0 added
[ 1435.031523][T16492] team0: Port device team_slave_1 added
[ 1435.400806][T16492] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1435.408106][T16492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1435.436429][T16492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1435.662638][T16492] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1435.670027][T16492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1435.697987][T16492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1435.944422][ T5794] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1435.953568][ T5794] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1435.966548][ T5794] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1436.006200][ T5794] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1436.016923][ T5794] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1436.259005][ T5847] usb 8-1: USB disconnect, device number 13
[ 1436.599087][T16584] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3458'.
[ 1436.762370][ T5794] Bluetooth: hci2: command tx timeout
[ 1437.179440][T16492] hsr_slave_0: entered promiscuous mode
[ 1437.190064][T16492] hsr_slave_1: entered promiscuous mode
[ 1437.199014][T16492] debugfs: 'hsr0' already exists in 'hsr'
[ 1437.204929][T16492] Cannot create hsr debugfs directory
[ 1438.117785][ T5794] Bluetooth: hci5: command tx timeout
[ 1438.186180][T16304] veth0_vlan: entered promiscuous mode
[ 1438.595576][T16304] veth1_vlan: entered promiscuous mode
[ 1439.367592][T16599] program syz.7.3461 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1439.514379][T16601] fuse: Bad value for 'fd'
[ 1440.198413][ T5794] Bluetooth: hci5: command tx timeout
[ 1440.376740][T16304] veth0_macvtap: entered promiscuous mode
[ 1440.472597][T16614] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3467'.
[ 1440.643015][T16304] veth1_macvtap: entered promiscuous mode
[ 1440.772234][T16492] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1440.826860][T16492] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1440.945700][T16492] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1441.068560][T16492] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1441.233194][T16304] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1441.357112][T16304] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1441.666253][T16574] chnl_net:caif_netlink_parms(): no params data found
[ 1441.672699][T16629] program syz.7.3470 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1441.742801][T14836] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1441.825413][T14836] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1441.846062][T16632] fuse: Bad value for 'fd'
[ 1441.933233][T14836] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1442.093053][T14836] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1442.278256][ T5794] Bluetooth: hci5: command tx timeout
[ 1442.748222][T16492] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1442.961439][T16492] 8021q: adding VLAN 0 to HW filter on device team0
[ 1443.064512][T15668] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1443.072161][T15668] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1443.315550][ T6134] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1443.323158][ T6134] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1443.557215][T16574] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1443.564869][T16574] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1443.578897][T16574] bridge_slave_0: entered allmulticast mode
[ 1443.594828][T16574] bridge_slave_0: entered promiscuous mode
[ 1443.626135][T16574] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1443.633989][T16574] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1443.668059][T16574] bridge_slave_1: entered allmulticast mode
[ 1443.690699][T16574] bridge_slave_1: entered promiscuous mode
[ 1443.777590][T16441] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1444.004530][T16441] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1444.016469][T16441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1444.029304][T16441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1444.040495][T16441] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1444.053765][T16441] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1444.063149][T16441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1444.106481][T16574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1444.152789][T16574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1444.242882][T16441] usb 3-1: config 0 descriptor??
[ 1444.357685][ T5794] Bluetooth: hci5: command tx timeout
[ 1444.551902][T16666] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3477'.
[ 1444.627784][T16574] team0: Port device team_slave_0 added
[ 1444.772273][T16574] team0: Port device team_slave_1 added
[ 1444.780941][T16441] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1445.121619][T16441] usb 3-1: USB disconnect, device number 3
[ 1445.193412][T16574] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1445.201707][T16574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1445.229387][T16574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1445.316697][T16669] fido_id[16669]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1445.354501][T16574] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1445.364121][T16574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1445.392258][T16574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1445.878395][T16680] program syz.7.3479 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1446.012113][T16574] hsr_slave_0: entered promiscuous mode
[ 1446.059569][T16574] hsr_slave_1: entered promiscuous mode
[ 1446.094680][T16574] debugfs: 'hsr0' already exists in 'hsr'
[ 1446.100688][T16574] Cannot create hsr debugfs directory
[ 1446.266361][T16684] fuse: Bad value for 'fd'
[ 1447.631059][T16492] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1448.195212][T16713] loop6: detected capacity change from 0 to 2640
[ 1448.249963][T16713] buffer_io_error: 7 callbacks suppressed
[ 1448.250055][T16713] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1448.318141][T16713] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1448.415248][T16713] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1448.485701][T16713] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1448.515131][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1448.523781][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1448.564460][T16713] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1448.584572][T16713] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1448.649886][T16713] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1448.678274][T16713] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1448.686401][T16713] ldm_validate_partition_table(): Disk read failed.
[ 1448.766887][T16713] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1448.812525][T16713] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1448.898104][T16713] Dev loop6: unable to read RDB block 0
[ 1448.904299][T16713]  loop6: unable to read partition table
[ 1448.938672][ T6054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1448.948394][ T6054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1448.985332][T16713] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[ 1449.200804][T16574] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1449.314222][T16574] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1449.422487][T16574] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1449.592903][T16574] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1450.069634][T16692] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1450.257757][T16692] usb 9-1: Using ep0 maxpacket: 32
[ 1450.296417][T16692] usb 9-1: config 0 has an invalid interface number: 188 but max is 0
[ 1450.305624][T16692] usb 9-1: config 0 has no interface number 0
[ 1450.388092][T16692] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1450.458956][T16692] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1450.468822][T16692] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1450.479316][T16692] usb 9-1: Product: syz
[ 1450.483671][T16692] usb 9-1: Manufacturer: syz
[ 1450.489336][T16692] usb 9-1: SerialNumber: syz
[ 1450.618034][T16692] usb 9-1: config 0 descriptor??
[ 1450.651959][T16732] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1450.751043][T16492] veth0_vlan: entered promiscuous mode
[ 1450.943453][T16732] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1450.983600][T16492] veth1_vlan: entered promiscuous mode
[ 1451.221122][T16692] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[ 1451.259153][T16692] asix 9-1:0.188: probe with driver asix failed with error -61
[ 1451.390168][T16574] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1451.715756][T16574] 8021q: adding VLAN 0 to HW filter on device team0
[ 1451.804914][T16492] veth0_macvtap: entered promiscuous mode
[ 1451.862110][T16492] veth1_macvtap: entered promiscuous mode
[ 1451.944832][T16239] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1451.952600][T16239] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1452.108242][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1452.115736][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1452.237109][T16492] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1452.341629][T16492] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1452.378103][T13043] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[ 1452.452593][T16239] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1452.542489][T16239] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1452.574904][T13043] usb 8-1: Using ep0 maxpacket: 8
[ 1452.643090][T13043] usb 8-1: config 0 has no interfaces?
[ 1452.648963][T13043] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1452.658541][T13043] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1452.693331][   T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1452.738763][   T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1452.743915][T13043] usb 8-1: config 0 descriptor??
[ 1453.120863][T13043] usb 9-1: USB disconnect, device number 2
[ 1453.299159][   T31] usb 8-1: USB disconnect, device number 14
[ 1453.308389][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1454.405727][T16785] program syz.7.3503 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1455.613483][T16574] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1456.744478][T16574] veth0_vlan: entered promiscuous mode
[ 1457.054738][T16574] veth1_vlan: entered promiscuous mode
[ 1458.008344][T16574] veth0_macvtap: entered promiscuous mode
[ 1458.161859][T16574] veth1_macvtap: entered promiscuous mode
[ 1458.785380][T16574] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1459.002868][T16806] program syz.8.3507 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1459.016624][T16574] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1459.255732][T12419] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1459.429094][ T6054] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1459.552776][ T6054] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1459.573187][ T6054] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1461.397884][T12618] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[ 1461.648049][T12618] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1461.657742][T12618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1461.665927][T12618] usb 3-1: Product: syz
[ 1461.670542][T12618] usb 3-1: Manufacturer: syz
[ 1461.675318][T12618] usb 3-1: SerialNumber: syz
[ 1461.832807][T12618] usb 3-1: config 0 descriptor??
[ 1462.139713][T12618] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1462.927256][ T6134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1462.935707][ T6134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1463.000707][T12618] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1463.097150][T12618] usb 3-1: USB disconnect, device number 4
[ 1463.251089][ T6046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1463.259255][ T6046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1463.858389][   T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1464.028467][   T24] usb 9-1: device descriptor read/64, error -71
[ 1464.288308][   T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1464.481806][   T24] usb 9-1: device descriptor read/64, error -71
[ 1464.598201][T12618] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1464.603480][   T24] usb usb9-port1: attempt power cycle
[ 1468.572598][T12618] usb 10-1: Using ep0 maxpacket: 16
[ 1471.628801][   T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1472.922658][T12618] usb 10-1: unable to read config index 0 descriptor/start: -71
[ 1472.930829][T12618] usb 10-1: can't read configurations, error -71
[ 1472.967085][   T24] usb 9-1: device descriptor read/8, error -71
[ 1473.668544][T12618] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1473.837654][T12618] usb 10-1: Using ep0 maxpacket: 32
[ 1473.888244][T12618] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1473.949971][T12618] usb 10-1: config 1 has an invalid interface number: 162 but max is 0
[ 1473.958714][T12618] usb 10-1: config 1 has no interface number 0
[ 1474.016824][T12618] usb 10-1: config 1 interface 162 has no altsetting 0
[ 1474.077603][T12618] usb 10-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=f7.ab
[ 1474.086978][T12618] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1474.095616][T12618] usb 10-1: Product: syz
[ 1474.100142][T12618] usb 10-1: Manufacturer: syz
[ 1474.104995][T12618] usb 10-1: SerialNumber: syz
[ 1474.674885][T12618] usb 10-1: USB disconnect, device number 3
[ 1474.928349][T14651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1474.936493][T14651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1475.137930][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1475.145952][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1475.748796][T12618] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[ 1476.025863][T12618] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1476.035807][T12618] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1476.044265][T12618] usb 9-1: Product: syz
[ 1476.048677][T12618] usb 9-1: Manufacturer: syz
[ 1476.053439][T12618] usb 9-1: SerialNumber: syz
[ 1476.148744][T12618] usb 9-1: config 0 descriptor??
[ 1476.433664][T12618] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1476.563796][T16925] program syz.1.3533 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1477.268857][T12618] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1477.358442][T12618] usb 9-1: USB disconnect, device number 7
[ 1477.597628][   T24] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1477.787673][   T24] usb 2-1: device descriptor read/64, error -71
[ 1478.059611][   T24] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1478.237796][   T24] usb 2-1: device descriptor read/64, error -71
[ 1478.360581][   T24] usb usb2-port1: attempt power cycle
[ 1478.647703][T12618] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[ 1478.749029][   T24] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1478.817713][   T24] usb 2-1: device descriptor read/8, error -71
[ 1478.929962][T12618] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1478.939560][T12618] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1478.951641][T12618] usb 9-1: Product: syz
[ 1478.955985][T12618] usb 9-1: Manufacturer: syz
[ 1478.963326][T12618] usb 9-1: SerialNumber: syz
[ 1479.055557][T12618] usb 9-1: config 0 descriptor??
[ 1479.087957][   T24] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1479.171093][   T24] usb 2-1: device descriptor read/8, error -71
[ 1479.306312][T12618] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1479.338065][   T24] usb usb2-port1: unable to enumerate USB device
[ 1479.481794][ T5847] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1479.680747][ T5847] usb 10-1: Using ep0 maxpacket: 8
[ 1479.736137][ T5847] usb 10-1: config 152 has an invalid descriptor of length 0, skipping remainder of the config
[ 1479.746991][ T5847] usb 10-1: config 152 has 0 interfaces, different from the descriptor's value: 1
[ 1479.825237][ T5847] usb 10-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1479.835030][ T5847] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1479.843607][ T5847] usb 10-1: Product: syz
[ 1479.848276][ T5847] usb 10-1: Manufacturer: syz
[ 1479.853258][ T5847] usb 10-1: SerialNumber: syz
[ 1481.636865][T12618] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[ 1487.738366][T12618] usb 10-1: USB disconnect, device number 4
[ 1487.942203][   T24] usb 9-1: USB disconnect, device number 8
[ 1488.128758][T16973] program syz.2.3546 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1489.370978][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1489.385038][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1489.472612][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1489.485663][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1489.503228][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1489.618960][   T24] usb 9-1: new full-speed USB device number 9 using dummy_hcd
[ 1489.913550][   T24] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1489.923192][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1489.931793][   T24] usb 9-1: Product: syz
[ 1489.936142][   T24] usb 9-1: Manufacturer: syz
[ 1489.941203][   T24] usb 9-1: SerialNumber: syz
[ 1490.097092][   T24] usb 9-1: config 0 descriptor??
[ 1490.439660][   T24] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1491.260391][   T24] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1491.353013][   T24] usb 9-1: USB disconnect, device number 9
[ 1491.468140][ T5847] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 1491.558182][   T51] Bluetooth: hci0: command tx timeout
[ 1491.789910][ T5847] usb 10-1: Using ep0 maxpacket: 8
[ 1491.814015][ T5847] usb 10-1: config 152 has an invalid descriptor of length 0, skipping remainder of the config
[ 1491.825800][ T5847] usb 10-1: config 152 has 0 interfaces, different from the descriptor's value: 1
[ 1491.984851][ T5847] usb 10-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1491.994785][ T5847] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1492.003390][ T5847] usb 10-1: Product: syz
[ 1492.007938][ T5847] usb 10-1: Manufacturer: syz
[ 1492.012822][ T5847] usb 10-1: SerialNumber: syz
[ 1492.718377][T16993] chnl_net:caif_netlink_parms(): no params data found
[ 1492.814203][T17030] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3556'.
[ 1493.440378][T17030] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3556'.
[ 1493.639904][   T51] Bluetooth: hci0: command tx timeout
[ 1493.648290][T14651] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1493.680843][T16239] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1493.774180][T16239] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1493.839688][T16239] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1494.369236][   T24] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1494.627834][   T24] usb 2-1: Using ep0 maxpacket: 8
[ 1494.698037][   T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1495.230902][   T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1495.240613][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1495.249054][   T24] usb 2-1: Product: syz
[ 1495.253507][   T24] usb 2-1: Manufacturer: syz
[ 1495.258475][   T24] usb 2-1: SerialNumber: syz
[ 1496.217549][   T51] Bluetooth: hci0: command tx timeout
[ 1496.226356][   T24] usb 2-1: config 0 descriptor??
[ 1496.992190][ T5847] usb 10-1: USB disconnect, device number 5
[ 1497.097979][T16993] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1497.105578][T16993] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1497.184189][T16993] bridge_slave_0: entered allmulticast mode
[ 1497.254614][T16993] bridge_slave_0: entered promiscuous mode
[ 1497.345015][T16993] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1497.352797][T16993] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1497.426011][T16993] bridge_slave_1: entered allmulticast mode
[ 1497.469391][T16993] bridge_slave_1: entered promiscuous mode
[ 1498.221369][T12618] usb 2-1: USB disconnect, device number 83
[ 1498.277840][   T51] Bluetooth: hci0: command tx timeout
[ 1498.284081][T16993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1498.414892][T16993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1498.480636][T17064] overlayfs: failed to resolve './bus': -2
[ 1499.101928][T16993] team0: Port device team_slave_0 added
[ 1499.213626][T16993] team0: Port device team_slave_1 added
[ 1499.664436][T16993] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1499.671988][T16993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1499.699963][T16993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1500.002846][T16993] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1500.010726][T16993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1500.042705][T16993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1501.349786][T16993] hsr_slave_0: entered promiscuous mode
[ 1501.459756][T16993] hsr_slave_1: entered promiscuous mode
[ 1501.487877][   T24] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1501.516362][T12618] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[ 1501.538383][T16993] debugfs: 'hsr0' already exists in 'hsr'
[ 1501.545632][T16993] Cannot create hsr debugfs directory
[ 1501.720584][T12618] usb 10-1: Using ep0 maxpacket: 8
[ 1501.749629][   T24] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1501.763462][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1501.776488][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1501.792596][   T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1501.808821][   T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1501.808961][T12618] usb 10-1: config 152 has an invalid descriptor of length 0, skipping remainder of the config
[ 1501.818412][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1501.837997][T12618] usb 10-1: config 152 has 0 interfaces, different from the descriptor's value: 1
[ 1502.021026][T12618] usb 10-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1502.031252][T12618] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1502.039985][T12618] usb 10-1: Product: syz
[ 1502.044689][T12618] usb 10-1: Manufacturer: syz
[ 1502.049648][T12618] usb 10-1: SerialNumber: syz
[ 1502.121096][   T24] usb 9-1: config 0 descriptor??
[ 1502.336981][ T6046] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1502.661440][   T24] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 1502.709811][ T6046] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1502.866571][T17100] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3574'.
[ 1502.878718][T17100] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3574'.
[ 1502.980844][T17100] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3574'.
[ 1502.992310][T17100] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3574'.
[ 1503.090072][ T6046] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1503.476658][ T6046] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1503.555793][T12618] usb 9-1: USB disconnect, device number 10
[ 1503.769903][T17112] overlayfs: failed to resolve './bus': -2
[ 1503.892495][T17101] fido_id[17101]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[ 1504.562189][   T24] usb 10-1: USB disconnect, device number 6
[ 1505.371400][ T6046] bridge_slave_1: left allmulticast mode
[ 1505.379388][ T6046] bridge_slave_1: left promiscuous mode
[ 1505.387563][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1505.531085][ T6046] bridge_slave_0: left allmulticast mode
[ 1505.539243][ T6046] bridge_slave_0: left promiscuous mode
[ 1505.550441][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1506.483648][T17146] overlayfs: failed to resolve './bus': -2
[ 1507.692393][   T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1507.724576][T12618] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1507.898921][ T6046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1507.947860][   T31] usb 3-1: Using ep0 maxpacket: 8
[ 1507.954226][T12618] usb 2-1: Using ep0 maxpacket: 16
[ 1508.034637][   T31] usb 3-1: config 152 has an invalid descriptor of length 0, skipping remainder of the config
[ 1508.057836][   T31] usb 3-1: config 152 has 0 interfaces, different from the descriptor's value: 1
[ 1508.069675][T12618] usb 2-1: config index 0 descriptor too short (expected 65315, got 36)
[ 1508.083483][T12618] usb 2-1: config 0 has too many interfaces: 239, using maximum allowed: 32
[ 1508.096743][T12618] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1508.109846][T12618] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 239
[ 1508.121804][T12618] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1508.137909][T12618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1508.152332][ T6046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1508.205499][   T31] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1508.218938][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1508.236240][   T31] usb 3-1: Product: syz
[ 1508.242603][   T31] usb 3-1: Manufacturer: syz
[ 1508.249575][   T31] usb 3-1: SerialNumber: syz
[ 1508.304537][ T6046] bond0 (unregistering): Released all slaves
[ 1508.377952][T12618] usb 2-1: config 0 descriptor??
[ 1509.222877][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3590'.
[ 1509.236552][T17168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3590'.
[ 1509.322096][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3590'.
[ 1509.333340][T17168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3590'.
[ 1509.811959][ T6046] hsr_slave_0: left promiscuous mode
[ 1509.838607][ T6046] hsr_slave_1: left promiscuous mode
[ 1509.874097][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1509.883956][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1509.965071][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1509.981972][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1510.096414][ T6046] veth1_macvtap: left promiscuous mode
[ 1510.141317][ T6046] veth0_macvtap: left promiscuous mode
[ 1510.168159][ T6046] veth1_vlan: left promiscuous mode
[ 1510.208016][ T6046] veth0_vlan: left promiscuous mode
[ 1510.666872][T12618] usb 2-1: USB disconnect, device number 84
[ 1511.001034][   T31] usb 3-1: USB disconnect, device number 5
[ 1511.997722][   T31] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1512.179234][   T31] usb 10-1: device descriptor read/64, error -71
[ 1512.369230][T17199] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3601'.
[ 1512.469871][   T31] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1512.688103][   T31] usb 10-1: device descriptor read/64, error -71
[ 1512.799781][   T31] usb usb10-port1: attempt power cycle
[ 1512.835546][T17204] kvm: kvm [17201]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xc844
[ 1512.890085][T17204] kvm: kvm [17201]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x34ff
[ 1513.021156][ T6046] team0 (unregistering): Port device team_slave_1 removed
[ 1513.143173][ T6046] team0 (unregistering): Port device team_slave_0 removed
[ 1513.188280][   T31] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1513.255612][   T31] usb 10-1: device descriptor read/8, error -71
[ 1513.598969][   T31] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1513.655894][   T31] usb 10-1: device descriptor read/8, error -71
[ 1513.783416][   T31] usb usb10-port1: unable to enumerate USB device
[ 1514.564175][T16993] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1514.718170][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1514.759601][T16993] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1514.838666][T16993] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1515.071900][T16993] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1515.589454][T12618] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1515.644856][T17228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3608'.
[ 1515.689340][T16692] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1515.802112][T12618] usb 9-1: Using ep0 maxpacket: 16
[ 1515.845690][T12618] usb 9-1: config index 0 descriptor too short (expected 65315, got 36)
[ 1515.858222][T12618] usb 9-1: config 0 has too many interfaces: 239, using maximum allowed: 32
[ 1515.868078][T12618] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1515.881362][T12618] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 239
[ 1515.894221][T12618] usb 9-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1515.905224][T12618] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1515.921429][T17229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3608'.
[ 1515.961327][T16692] usb 10-1: Using ep0 maxpacket: 8
[ 1515.973799][T16692] usb 10-1: config 152 has an invalid descriptor of length 0, skipping remainder of the config
[ 1515.986991][T16692] usb 10-1: config 152 has 0 interfaces, different from the descriptor's value: 1
[ 1516.005721][T12618] usb 9-1: config 0 descriptor??
[ 1516.080514][T16692] usb 10-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1516.092691][T16692] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1516.103687][T16692] usb 10-1: Product: syz
[ 1516.111823][T16692] usb 10-1: Manufacturer: syz
[ 1516.122687][T16692] usb 10-1: SerialNumber: syz
[ 1516.654826][T16993] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1516.783913][T16993] 8021q: adding VLAN 0 to HW filter on device team0
[ 1516.812936][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3607'.
[ 1516.824110][T17238] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3607'.
[ 1516.900617][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1516.909575][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1516.984251][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3607'.
[ 1516.996640][T17238] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3607'.
[ 1517.059121][T16970] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1517.069145][T16970] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1518.512586][T16692] usb 10-1: USB disconnect, device number 11
[ 1518.587242][   T31] usb 9-1: USB disconnect, device number 11
[ 1518.788510][T12618] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 1519.005862][T12618] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1519.038202][T12618] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1519.049079][T12618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1519.114661][T16692] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1519.198854][ T5847] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 1519.225302][T12618] usb 3-1: config 0 descriptor??
[ 1519.338651][T16692] usb 2-1: Using ep0 maxpacket: 32
[ 1519.385488][T12618] pwc: Askey VC010 type 2 USB webcam detected.
[ 1519.427692][ T5847] usb 10-1: Using ep0 maxpacket: 8
[ 1519.435218][T16692] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 1519.435944][T16993] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1519.444715][T16692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1519.444852][T16692] usb 2-1: Product: syz
[ 1519.444946][T16692] usb 2-1: Manufacturer: syz
[ 1519.445047][T16692] usb 2-1: SerialNumber: syz
[ 1519.602027][T16692] usb 2-1: config 0 descriptor??
[ 1519.615889][T12618] pwc: send_video_command error -71
[ 1519.621763][T12618] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 1519.630077][T12618] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[ 1519.641810][ T5847] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1519.651952][ T5847] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1519.660364][ T5847] usb 10-1: Product: syz
[ 1519.664901][ T5847] usb 10-1: Manufacturer: syz
[ 1519.670516][ T5847] usb 10-1: SerialNumber: syz
[ 1519.746340][T16692] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 1519.786228][T12618] usb 3-1: USB disconnect, device number 6
[ 1519.834328][ T5847] usb 10-1: config 0 descriptor??
[ 1520.093059][T17269] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3615'.
[ 1520.178031][ T5847] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1520.258105][T12618] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1520.390799][T16993] veth0_vlan: entered promiscuous mode
[ 1520.484887][T12618] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1520.497156][T16993] veth1_vlan: entered promiscuous mode
[ 1520.548143][T12618] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1520.558187][T12618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1520.595991][T16692] gspca_ov534_9: reg_w failed -71
[ 1520.629341][T12618] usb 3-1: config 0 descriptor??
[ 1520.676466][T12618] pwc: Askey VC010 type 2 USB webcam detected.
[ 1520.933581][T16692] gspca_ov534_9: Unknown sensor 0000
[ 1520.935460][T16692] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22
[ 1520.971306][T16692] usb 2-1: USB disconnect, device number 85
[ 1521.067258][T16993] veth0_macvtap: entered promiscuous mode
[ 1521.089681][T12618] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1521.157410][T12618] pwc: recv_control_msg error -32 req 02 val 2700
[ 1521.162181][T16993] veth1_macvtap: entered promiscuous mode
[ 1521.205455][T12618] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1521.252798][T12618] pwc: recv_control_msg error -32 req 04 val 1000
[ 1521.306917][T12618] pwc: recv_control_msg error -32 req 04 val 1300
[ 1521.359036][T12618] pwc: recv_control_msg error -32 req 04 val 1400
[ 1521.420291][T12618] pwc: recv_control_msg error -32 req 02 val 2000
[ 1521.539048][T12618] pwc: recv_control_msg error -32 req 02 val 2100
[ 1521.564422][T12618] pwc: recv_control_msg error -32 req 04 val 1500
[ 1521.578012][T16993] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1521.590668][T12618] pwc: recv_control_msg error -32 req 02 val 2500
[ 1521.720076][ T5847] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1521.793906][T16993] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1521.828910][ T5847] usb 10-1: USB disconnect, device number 12
[ 1521.855280][T12618] pwc: recv_control_msg error -71 req 02 val 2600
[ 1521.877827][T12618] pwc: recv_control_msg error -71 req 02 val 2900
[ 1521.898158][   T24] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 1521.959706][T12618] pwc: recv_control_msg error -71 req 02 val 2800
[ 1522.032326][T12618] pwc: recv_control_msg error -71 req 04 val 1100
[ 1522.070676][ T6136] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1522.089161][T12618] pwc: recv_control_msg error -71 req 04 val 1200
[ 1522.123797][ T6136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1522.154527][T12618] pwc: Registered as video103.
[ 1522.159671][   T24] usb 9-1: Using ep0 maxpacket: 16
[ 1522.191191][   T24] usb 9-1: config 0 has no interfaces?
[ 1522.218072][ T6136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1522.251648][T12618] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input56
[ 1522.284928][   T24] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1522.296986][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1522.308590][   T24] usb 9-1: Product: syz
[ 1522.315089][   T24] usb 9-1: Manufacturer: syz
[ 1522.322051][   T24] usb 9-1: SerialNumber: syz
[ 1522.327088][ T6046] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1522.446680][T12618] usb 3-1: USB disconnect, device number 7
[ 1522.664715][   T24] usb 9-1: config 0 descriptor??
[ 1522.930215][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3618'.
[ 1523.138592][T17293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3618'.
[ 1524.730936][   T31] usb 9-1: USB disconnect, device number 12
[ 1524.788167][   T24] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 1524.990368][   T24] usb 2-1: Using ep0 maxpacket: 8
[ 1525.021022][   T24] usb 2-1: config 152 has an invalid descriptor of length 0, skipping remainder of the config
[ 1525.034032][   T24] usb 2-1: config 152 has 0 interfaces, different from the descriptor's value: 1
[ 1525.119894][   T24] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1525.133559][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1525.143033][   T24] usb 2-1: Product: syz
[ 1525.147544][   T24] usb 2-1: Manufacturer: syz
[ 1525.152329][   T24] usb 2-1: SerialNumber: syz
[ 1525.218034][   T31] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 1525.408568][   T31] usb 9-1: Using ep0 maxpacket: 16
[ 1525.460567][   T31] usb 9-1: config index 0 descriptor too short (expected 65315, got 36)
[ 1525.469723][   T31] usb 9-1: config 0 has too many interfaces: 239, using maximum allowed: 32
[ 1525.471563][T17327] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3625'.
[ 1525.479615][   T31] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1525.479748][   T31] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 239
[ 1525.545119][   T31] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1525.559409][   T31] usb 9-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1525.569298][   T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1525.608352][   T31] usb 9-1: config 0 descriptor??
[ 1525.656475][   T31] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1525.854870][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3622'.
[ 1525.865858][T17331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3622'.
[ 1526.044719][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1526.068670][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3622'.
[ 1526.078225][T17331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3622'.
[ 1526.097782][T10061] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1526.136431][T10061] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1526.175780][T10061] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1527.654126][   T31] usb 2-1: USB disconnect, device number 86
[ 1528.207206][   T31] usb 9-1: USB disconnect, device number 13
[ 1528.213016][T17369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3631'.
[ 1528.791885][T17370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3631'.
[ 1528.860307][T14651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1528.868543][T14651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1529.087680][   T31] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1529.288033][   T31] usb 10-1: Using ep0 maxpacket: 16
[ 1529.295969][ T6136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1529.305107][ T6136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1529.343847][   T31] usb 10-1: config 0 has no interfaces?
[ 1529.393008][   T31] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1529.407232][   T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1529.422671][   T31] usb 10-1: Product: syz
[ 1529.434498][   T31] usb 10-1: Manufacturer: syz
[ 1529.441047][   T31] usb 10-1: SerialNumber: syz
[ 1529.478182][   T31] usb 10-1: config 0 descriptor??
[ 1529.768517][T17388] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3635'.
[ 1531.409623][T12618] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 1531.537750][T16692] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 1531.588575][T12618] usb 9-1: Using ep0 maxpacket: 8
[ 1531.607144][T12618] usb 9-1: config 152 has an invalid descriptor of length 0, skipping remainder of the config
[ 1531.621618][T12618] usb 9-1: config 152 has 0 interfaces, different from the descriptor's value: 1
[ 1531.666122][T12618] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1531.689701][T12618] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1531.699772][T12618] usb 9-1: Product: syz
[ 1531.704601][T12618] usb 9-1: Manufacturer: syz
[ 1531.709794][T12618] usb 9-1: SerialNumber: syz
[ 1531.747631][T16692] usb 1-1: Using ep0 maxpacket: 16
[ 1531.799247][T16692] usb 1-1: config index 0 descriptor too short (expected 65315, got 36)
[ 1531.809478][T16692] usb 1-1: config 0 has too many interfaces: 239, using maximum allowed: 32
[ 1531.818902][T16692] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1531.829762][T16692] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 239
[ 1531.857593][T16692] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1531.872022][T16692] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1531.882013][T16692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1531.973889][T16692] usb 1-1: config 0 descriptor??
[ 1532.075705][T16692] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1532.126979][T16692] usb 10-1: USB disconnect, device number 13
[ 1532.568307][T17420] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3640'.
[ 1532.577977][T17420] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3640'.
[ 1532.900664][ T6136] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1532.920673][T17420] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3640'.
[ 1532.932693][T17420] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3640'.
[ 1532.940106][ T6136] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1532.981631][ T6136] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1532.996758][T16692] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1533.045540][ T6136] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1533.223246][T16692] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1533.235592][T16692] usb 3-1: config 0 has no interfaces?
[ 1533.242431][T16692] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1533.252292][T16692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1533.354378][T16692] usb 3-1: config 0 descriptor??
[ 1533.679209][T16692] usb 3-1: USB disconnect, device number 8
[ 1533.818074][   T24] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 1533.949896][T17438] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3647'.
[ 1534.027848][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1534.040725][   T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1534.051690][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1534.062100][   T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1534.073294][   T24] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1534.084186][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1534.173738][T17438] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3647'.
[ 1534.278327][T16692] usb 9-1: USB disconnect, device number 14
[ 1534.309238][T16498] usb 1-1: USB disconnect, device number 83
[ 1534.421599][   T24] usb 2-1: config 0 descriptor??
[ 1534.734138][   T24] hdpvr 2-1:0.0: firmware version 0x43 dated 4��~!3Uᓝ��'��ڂ#/F1Z�v�?�����5BF:')�=
[ 1534.746689][   T24] hdpvr 2-1:0.0: untested firmware, the driver might not work.
[ 1535.235688][T16692] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1535.458049][   T24] hdpvr 2-1:0.0: Could not setup controls
[ 1535.472674][   T24] hdpvr 2-1:0.0: registering videodev failed
[ 1535.521795][T16692] usb 10-1: Using ep0 maxpacket: 16
[ 1535.555443][   T24] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71
[ 1535.559096][T16692] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1535.581406][T16692] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1535.727168][T16692] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1535.735977][   T24] usb 2-1: USB disconnect, device number 87
[ 1535.739162][T16692] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1535.739298][T16692] usb 10-1: Product: syz
[ 1535.739390][T16692] usb 10-1: Manufacturer: syz
[ 1535.739488][T16692] usb 10-1: SerialNumber: syz
[ 1535.977757][T12618] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 1536.014272][T16692] usb 10-1: config 0 descriptor??
[ 1536.137834][T16692] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1536.147903][T16692] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class)
[ 1536.213846][T12618] usb 1-1: Using ep0 maxpacket: 16
[ 1536.264949][T12618] usb 1-1: config 0 has no interfaces?
[ 1536.464897][T12618] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1536.474871][T12618] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1536.483392][T12618] usb 1-1: Product: syz
[ 1536.488125][T12618] usb 1-1: Manufacturer: syz
[ 1536.498577][T12618] usb 1-1: SerialNumber: syz
[ 1536.873537][T12618] usb 1-1: config 0 descriptor??
[ 1537.630534][T16692] em28xx 10-1:0.0: unknown em28xx chip ID (234)
[ 1537.750571][T16692] em28xx 10-1:0.0: Config register raw data: 0xfffffffb
[ 1538.061031][T16692] em28xx 10-1:0.0: AC97 chip type couldn't be determined
[ 1538.068907][T16692] em28xx 10-1:0.0: No AC97 audio processor
[ 1538.449976][T16692] usb 10-1: USB disconnect, device number 14
[ 1538.481048][T16692] em28xx 10-1:0.0: Disconnecting em28xx
[ 1538.567156][T16692] em28xx 10-1:0.0: Freeing device
[ 1539.308243][T17475] program syz.1.3656 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1539.444449][   T24] usb 1-1: USB disconnect, device number 84
[ 1540.066692][T17488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3661'.
[ 1540.112104][T16692] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1540.318613][T16692] usb 3-1: Using ep0 maxpacket: 16
[ 1540.347869][T16692] usb 3-1: config index 0 descriptor too short (expected 65315, got 36)
[ 1540.356491][T16692] usb 3-1: config 0 has too many interfaces: 239, using maximum allowed: 32
[ 1540.366334][T16692] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1540.377112][T16692] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 239
[ 1540.548440][T16692] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1540.562868][T16692] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1540.573341][T16692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1540.637598][T17492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3661'.
[ 1540.872861][T16692] usb 3-1: config 0 descriptor??
[ 1540.946163][T16692] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1544.130886][T16498] usb 3-1: USB disconnect, device number 9
[ 1544.871686][T16692] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1544.999183][T17529] program syz.1.3672 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1545.117710][T16692] usb 9-1: Using ep0 maxpacket: 16
[ 1545.154298][T16692] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1545.234502][T16692] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1545.244430][T16692] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1545.253021][T16692] usb 9-1: Product: syz
[ 1545.257636][T16692] usb 9-1: Manufacturer: syz
[ 1545.262420][T16692] usb 9-1: SerialNumber: syz
[ 1545.397014][T16692] usb 9-1: config 0 descriptor??
[ 1545.978417][T17543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3678'.
[ 1546.903237][T17546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3678'.
[ 1548.642184][T16498] usb 9-1: USB disconnect, device number 15
[ 1550.028841][T17574] program syz.2.3685 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1550.538176][ T5794] Bluetooth: hci2: unexpected event for opcode 0x1004
[ 1551.605258][ T5847] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[ 1551.878065][ T5847] usb 9-1: Using ep0 maxpacket: 16
[ 1551.935626][ T5847] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1552.064462][ T5847] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1552.079482][ T5847] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1552.088956][ T5847] usb 9-1: Product: syz
[ 1552.093403][ T5847] usb 9-1: Manufacturer: syz
[ 1552.098676][ T5847] usb 9-1: SerialNumber: syz
[ 1552.116865][T16692] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[ 1552.534663][T16498] hid_parser_main: 150 callbacks suppressed
[ 1552.534790][T16498] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[ 1552.577138][T17601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3695'.
[ 1553.104761][ T5847] usb 9-1: config 0 descriptor??
[ 1553.308070][T16498] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1554.229551][T16692] usb 1-1: no configurations
[ 1554.234866][T16692] usb 1-1: can't read configurations, error -22
[ 1554.331734][T17601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3695'.
[ 1554.600276][   T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1554.609278][   T51] Bluetooth: hci2: Injecting HCI hardware error event
[ 1554.621503][ T5794] Bluetooth: hci2: hardware error 0x00
[ 1554.797681][T16692] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[ 1555.036352][T17605] fido_id[17605]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1555.130941][T16498] usb 9-1: USB disconnect, device number 16
[ 1555.606305][T17620] program syz.8.3699 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1556.677642][ T5794] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1557.713178][T17644] fuse: Bad value for 'fd'
[ 1557.849725][T17646] sctp: [Deprecated]: syz.2.3707 (pid 17646) Use of int in max_burst socket option.
[ 1557.849725][T17646] Use struct sctp_assoc_value instead
[ 1558.468528][T16498] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 1558.789365][T16692] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 1558.979388][T17657] program syz.2.3711 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1559.010425][T16692] usb 2-1: no configurations
[ 1559.017259][T16692] usb 2-1: can't read configurations, error -22
[ 1559.257841][T16498] usb 1-1: Using ep0 maxpacket: 8
[ 1559.281608][T16498] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1559.589994][T16498] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c
[ 1559.600844][T16498] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1559.610173][T16498] usb 1-1: Product: syz
[ 1559.614748][T16498] usb 1-1: Manufacturer: syz
[ 1559.620032][T16498] usb 1-1: SerialNumber: syz
[ 1559.892145][T16498] usb 1-1: config 0 descriptor??
[ 1559.981426][T16498] cdc_acm 1-1:0.0: Zero length descriptor references
[ 1560.051652][T16498] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22
[ 1560.218932][T16498] usb 1-1: USB disconnect, device number 87
[ 1560.256590][T16692] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 1561.356920][T16692] usb 2-1: no configurations
[ 1561.361955][T16692] usb 2-1: can't read configurations, error -22
[ 1561.497155][T16692] usb usb2-port1: attempt power cycle
[ 1561.880217][T16692] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1562.177729][T16692] usb 2-1: device not accepting address 90, error -71
[ 1562.476776][T17686] fuse: Bad value for 'fd'
[ 1562.840252][   T51] Bluetooth: hci5: command 0x0406 tx timeout
[ 1564.159532][T17701] Bluetooth: MGMT ver 1.23
[ 1564.537776][T16692] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1565.379028][T16498] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 1565.409052][T16692] usb 10-1: Using ep0 maxpacket: 8
[ 1565.442171][T16692] usb 10-1: config 152 has an invalid descriptor of length 0, skipping remainder of the config
[ 1565.453276][T16692] usb 10-1: config 152 has 0 interfaces, different from the descriptor's value: 1
[ 1565.670964][T16692] usb 10-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1565.690842][T16692] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1565.702089][T16692] usb 10-1: Product: syz
[ 1565.706612][T16692] usb 10-1: Manufacturer: syz
[ 1565.711698][T16692] usb 10-1: SerialNumber: syz
[ 1566.018343][T16498] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1566.029831][T16498] usb 1-1: config 0 has no interfaces?
[ 1566.097775][T16498] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1566.108404][T16498] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1566.116640][T16498] usb 1-1: Product: syz
[ 1566.122894][T16498] usb 1-1: Manufacturer: syz
[ 1566.128068][T16498] usb 1-1: SerialNumber: syz
[ 1566.256617][T16498] usb 1-1: config 0 descriptor??
[ 1566.829401][T17728] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3726'.
[ 1567.825652][T17728] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3726'.
[ 1568.340960][T16498] usb 1-1: USB disconnect, device number 88
[ 1568.387070][T16692] usb 10-1: USB disconnect, device number 15
[ 1568.965742][T17743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3739'.
[ 1569.017651][T16692] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[ 1569.207561][T16692] usb 1-1: Using ep0 maxpacket: 16
[ 1569.235440][T16692] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1569.247723][T16692] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1569.257007][T16692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1569.418039][T16692] usb 1-1: config 0 descriptor??
[ 1569.547839][ T5847] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 1569.740202][T17746] bridge3: port 1(veth3) entered blocking state
[ 1569.751255][T17746] bridge3: port 1(veth3) entered disabled state
[ 1569.806250][ T5847] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[ 1569.815019][ T5847] usb 2-1: config 0 has no interface number 0
[ 1569.862189][T17746] veth3: entered allmulticast mode
[ 1569.920000][ T5847] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[ 1569.929710][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1569.938302][ T5847] usb 2-1: Product: syz
[ 1569.942651][ T5847] usb 2-1: Manufacturer: syz
[ 1569.947887][ T5847] usb 2-1: SerialNumber: syz
[ 1569.955563][T16692] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0
[ 1569.965869][T16692] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0
[ 1569.974016][T16692] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0
[ 1569.991400][T16692] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0
[ 1570.001049][T16692] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0
[ 1570.039054][T17746] veth3: entered promiscuous mode
[ 1570.180095][ T5847] usb 2-1: config 0 descriptor??
[ 1570.265026][T16692] mcp2221 0003:04D8:00DD.0016: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[ 1570.589262][ T5847] uvcvideo 2-1:0.64: Found UVC 0.08 device syz (046d:0823)
[ 1570.676387][T16692] usb 1-1: USB disconnect, device number 89
[ 1570.710860][T17749] bridge3: port 2(veth5) entered blocking state
[ 1570.715169][ T5847] uvcvideo 2-1:0.64: No valid video chain found.
[ 1570.717944][T17749] bridge3: port 2(veth5) entered disabled state
[ 1570.840035][T17749] veth5: entered allmulticast mode
[ 1570.895311][T17759] siw: device registration error -23
[ 1570.962860][T17749] veth5: entered promiscuous mode
[ 1571.250547][ T5847] usb 2-1: USB disconnect, device number 92
[ 1572.953222][T16692] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[ 1573.862228][T16692] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1573.878888][T16692] usb 9-1: config 0 has no interfaces?
[ 1574.003758][T16692] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1574.013841][T16692] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1574.022550][T16692] usb 9-1: Product: syz
[ 1574.026895][T16692] usb 9-1: Manufacturer: syz
[ 1574.031896][T16692] usb 9-1: SerialNumber: syz
[ 1574.223209][T16692] usb 9-1: config 0 descriptor??
[ 1575.732367][   T24] usb 9-1: USB disconnect, device number 17
[ 1576.357945][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1579.247841][T17819] netlink: 'syz.9.3761': attribute type 4 has an invalid length.
[ 1582.055018][   T24] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 1583.107204][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1583.118882][   T24] usb 2-1: config 0 has no interfaces?
[ 1583.815357][   T24] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1583.826158][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1583.834564][   T24] usb 2-1: Product: syz
[ 1583.839088][   T24] usb 2-1: Manufacturer: syz
[ 1583.843888][   T24] usb 2-1: SerialNumber: syz
[ 1584.184632][   T24] usb 2-1: config 0 descriptor??
[ 1586.097721][   T24] usb 2-1: USB disconnect, device number 93
[ 1586.276809][T17869] loop2: detected capacity change from 0 to 7
[ 1586.408092][T17869] Dev loop2: unable to read RDB block 7
[ 1586.414120][T17869]  loop2: unable to read partition table
[ 1586.521159][T17869] loop2: partition table beyond EOD, truncated
[ 1586.529392][T17869] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[ 1587.398409][T17880] can0: slcan on ptm0.
[ 1587.471745][T17880] bond1: option fail_over_mac: invalid value (33)
[ 1587.491667][T17880] bond1 (unregistering): Released all slaves
[ 1587.603549][T17876] can0 (unregistered): slcan off ptm0.
[ 1592.832677][T17929] program syz.1.3790 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1598.173350][T17976] program syz.9.3803 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1603.888665][T18002] program syz.9.3811 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1604.619686][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1604.648640][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1604.658433][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1604.673538][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1604.685033][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1606.655684][T18027] program syz.8.3817 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1607.128002][ T5794] Bluetooth: hci1: command tx timeout
[ 1609.157664][ T5794] Bluetooth: hci1: command tx timeout
[ 1610.364977][T18008] chnl_net:caif_netlink_parms(): no params data found
[ 1611.256461][ T5794] Bluetooth: hci1: command tx timeout
[ 1613.328630][ T5794] Bluetooth: hci1: command tx timeout
[ 1614.718868][ T5794] Bluetooth: hci0: command 0x0406 tx timeout
[ 1614.826833][T18008] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1614.839614][T18008] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1615.594095][T18008] bridge_slave_0: entered allmulticast mode
[ 1615.673986][T18008] bridge_slave_0: entered promiscuous mode
[ 1615.949267][T18008] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1615.962676][T18008] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1616.060025][T18008] bridge_slave_1: entered allmulticast mode
[ 1616.094237][T18008] bridge_slave_1: entered promiscuous mode
[ 1616.390149][  T142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1616.728323][T15908] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1616.743942][T15908] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1616.752723][T15908] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1616.799906][T15908] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1616.848859][T15908] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1616.854103][  T142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1617.199606][T18008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1617.349217][  T142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1617.995953][T18008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1618.212095][  T142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1618.861621][T18008] team0: Port device team_slave_0 added
[ 1618.917930][T15908] Bluetooth: hci0: command tx timeout
[ 1619.024931][T18008] team0: Port device team_slave_1 added
[ 1620.004995][T18008] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1620.013770][T18008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1620.041225][T18008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1620.345521][T18008] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1620.352721][T18008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1620.381567][T18008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1621.006947][T15908] Bluetooth: hci0: command tx timeout
[ 1621.265862][   T24] hid-generic 0058:00FF:0006.0017: hidraw0: <UNKNOWN> HID vffffff.ec Device [syz1] on syz1
[ 1621.905310][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1621.923047][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1621.924479][T18092] fido_id[18092]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1621.932497][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1621.967972][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1622.001384][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1622.025009][  T142] bridge_slave_1: left allmulticast mode
[ 1622.031528][  T142] bridge_slave_1: left promiscuous mode
[ 1622.038698][  T142] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1622.113808][  T142] bridge_slave_0: left allmulticast mode
[ 1622.121718][  T142] bridge_slave_0: left promiscuous mode
[ 1622.128549][  T142] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1623.077634][   T51] Bluetooth: hci0: command tx timeout
[ 1623.413428][  T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1623.498097][  T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1623.568460][  T142] bond0 (unregistering): Released all slaves
[ 1623.693898][T18008] hsr_slave_0: entered promiscuous mode
[ 1623.755418][T18008] hsr_slave_1: entered promiscuous mode
[ 1623.780912][T18008] debugfs: 'hsr0' already exists in 'hsr'
[ 1623.786837][T18008] Cannot create hsr debugfs directory
[ 1624.117713][   T51] Bluetooth: hci3: command tx timeout
[ 1625.157950][   T51] Bluetooth: hci0: command tx timeout
[ 1626.201192][   T51] Bluetooth: hci3: command tx timeout
[ 1627.492725][  T142] hsr_slave_0: left promiscuous mode
[ 1627.505805][  T142] hsr_slave_1: left promiscuous mode
[ 1627.523078][  T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1627.538512][  T142] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1627.566645][  T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1627.574427][  T142] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1627.619186][  T142] veth1_macvtap: left promiscuous mode
[ 1627.625235][  T142] veth0_macvtap: left promiscuous mode
[ 1627.638459][  T142] veth1_vlan: left promiscuous mode
[ 1627.644351][  T142] veth0_vlan: left promiscuous mode
[ 1627.697196][T18106] kvm: kvm [18105]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xd316
[ 1627.796229][T18106] kvm: kvm [18105]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000d271
[ 1628.277953][   T51] Bluetooth: hci3: command tx timeout
[ 1629.079451][  T142] team0 (unregistering): Port device team_slave_1 removed
[ 1629.138020][  T142] team0 (unregistering): Port device team_slave_0 removed
[ 1629.773751][   T24] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1630.012042][   T24] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1630.056280][   T24] usb 10-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1630.066098][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1630.074737][   T24] usb 10-1: Product: syz
[ 1630.079284][   T24] usb 10-1: Manufacturer: syz
[ 1630.084154][   T24] usb 10-1: SerialNumber: syz
[ 1630.113901][   T24] usb 10-1: config 0 descriptor??
[ 1630.175840][T18074] chnl_net:caif_netlink_parms(): no params data found
[ 1630.358194][   T51] Bluetooth: hci3: command tx timeout
[ 1630.796532][  T142] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1630.813362][  T142] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1630.969059][  T142] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1630.979838][  T142] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1631.118475][  T142] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1631.130273][  T142] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1631.409995][  T142] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1631.426132][  T142] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1631.527934][T18074] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1631.535432][T18074] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1631.545030][T18074] bridge_slave_0: entered allmulticast mode
[ 1631.555428][T18074] bridge_slave_0: entered promiscuous mode
[ 1631.605710][T18074] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1631.613585][T18074] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1631.629490][T18074] bridge_slave_1: entered allmulticast mode
[ 1631.640027][T18074] bridge_slave_1: entered promiscuous mode
[ 1631.677536][T18093] chnl_net:caif_netlink_parms(): no params data found
[ 1631.856765][T18008] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1631.935113][T18074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1631.992851][T18008] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1632.059143][T18074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1632.142682][T18008] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1632.282530][T18008] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1632.621639][ T5847] usb 10-1: USB disconnect, device number 16
[ 1632.691303][T18074] team0: Port device team_slave_0 added
[ 1632.741266][  T142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1632.756929][  T142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1632.835607][T18074] team0: Port device team_slave_1 added
[ 1633.143687][  T142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1633.155002][  T142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1633.343366][T18074] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1633.351755][T18074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1633.382280][T18074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1633.438883][  T142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1633.450083][  T142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1633.481932][T18074] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1633.489289][T18074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1633.515965][T18074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1633.681969][  T142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1633.693822][  T142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1633.865080][T18093] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1633.873139][T18093] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1633.888226][T18093] bridge_slave_0: entered allmulticast mode
[ 1633.893057][T18133] =====================================================
[ 1633.901740][T18133] BUG: KMSAN: uninit-value in iopt_pages_unfill_xarray+0xfe3/0x1660
[ 1633.910270][T18133]  iopt_pages_unfill_xarray+0xfe3/0x1660
[ 1633.916182][T18133]  iopt_area_remove_access+0x508/0x650
[ 1633.922138][T18133]  iommufd_access_pin_pages+0x19c3/0x1d30
[ 1633.928203][T18133]  iommufd_test+0xa0f3/0xbc60
[ 1633.928409][T18093] bridge_slave_0: entered promiscuous mode
[ 1633.933022][T18133]  iommufd_fops_ioctl+0x82a/0x9e0
[ 1633.933160][T18133]  __se_sys_ioctl+0x23c/0x400
[ 1633.933288][T18133]  __x64_sys_ioctl+0x97/0xe0
[ 1633.953927][T18133]  x64_sys_call+0x18a7/0x3e70
[ 1633.959035][T18133]  do_syscall_64+0xc9/0xf80
[ 1633.963726][T18133]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1633.970013][T18133] 
[ 1633.972411][T18133] Local variable batch created at:
[ 1633.981633][T18133]  iopt_pages_unfill_xarray+0x86/0x1660
[ 1633.988828][T18133]  iopt_area_remove_access+0x508/0x650
[ 1633.994530][T18133] 
[ 1633.996967][T18133] CPU: 0 UID: 0 PID: 18133 Comm: syz.9.3839 Tainted: G             L      syzkaller #0 PREEMPT(voluntary) 
[ 1634.009141][T18133] Tainted: [L]=SOFTLOCKUP
[ 1634.013567][T18133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1634.023892][T18133] =====================================================
[ 1634.031058][T18133] Disabling lock debugging due to kernel taint
[ 1634.037984][T18133] Kernel panic - not syncing: kmsan.panic set ...
[ 1634.044718][T18133] CPU: 0 UID: 0 PID: 18133 Comm: syz.9.3839 Tainted: G    B        L      syzkaller #0 PREEMPT(voluntary) 
[ 1634.056296][T18133] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[ 1634.061939][T18133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1634.072123][T18133] Call Trace:
[ 1634.075489][T18133]  <TASK>
[ 1634.078501][T18133]  __dump_stack+0x26/0x30
[ 1634.083028][T18133]  dump_stack_lvl+0x50/0x1c0
[ 1634.087797][T18133]  ? dump_stack+0x12/0x25
[ 1634.092313][T18133]  dump_stack+0x1e/0x25
[ 1634.096638][T18133]  vpanic+0x435/0xd40
[ 1634.100830][T18133]  panic+0x15d/0x160
[ 1634.104939][T18133]  kmsan_report+0x31a/0x320
[ 1634.109652][T18133]  ? __msan_warning+0x1b/0x30
[ 1634.114525][T18133]  ? iopt_pages_unfill_xarray+0xfe3/0x1660
[ 1634.120641][T18133]  ? iopt_area_remove_access+0x508/0x650
[ 1634.126512][T18133]  ? iommufd_access_pin_pages+0x19c3/0x1d30
[ 1634.132715][T18133]  ? iommufd_test+0xa0f3/0xbc60
[ 1634.137729][T18133]  ? iommufd_fops_ioctl+0x82a/0x9e0
[ 1634.143103][T18133]  ? __se_sys_ioctl+0x23c/0x400
[ 1634.148156][T18133]  ? __x64_sys_ioctl+0x97/0xe0
[ 1634.153100][T18133]  ? x64_sys_call+0x18a7/0x3e70
[ 1634.158137][T18133]  ? do_syscall_64+0xc9/0xf80
[ 1634.163004][T18133]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1634.169261][T18133]  ? kmsan_get_metadata+0xf1/0x160
[ 1634.174587][T18133]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1634.180624][T18133]  ? xas_load+0xcec/0xd70
[ 1634.185176][T18133]  ? __xas_next+0x142/0x7a0
[ 1634.189876][T18133]  ? kmsan_get_metadata+0xf1/0x160
[ 1634.195211][T18133]  __msan_warning+0x1b/0x30
[ 1634.199904][T18133]  iopt_pages_unfill_xarray+0xfe3/0x1660
[ 1634.205792][T18133]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1634.211865][T18133]  ? kmsan_get_metadata+0xf1/0x160
[ 1634.217190][T18133]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1634.223223][T18133]  ? interval_tree_remove+0x158e/0x1730
[ 1634.228961][T18133]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1634.235018][T18133]  iopt_area_remove_access+0x508/0x650
[ 1634.240720][T18133]  iommufd_access_pin_pages+0x19c3/0x1d30
[ 1634.246743][T18133]  iommufd_test+0xa0f3/0xbc60
[ 1634.251625][T18133]  ? stack_depot_save_flags+0x35/0x790
[ 1634.257288][T18133]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 1634.263850][T18133]  ? kmsan_get_metadata+0xf1/0x160
[ 1634.269211][T18133]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1634.275257][T18133]  ? __pfx_iommufd_test+0x10/0x10
[ 1634.280454][T18133]  ? __pfx_iommufd_test+0x10/0x10
[ 1634.285670][T18133]  iommufd_fops_ioctl+0x82a/0x9e0
[ 1634.290944][T18133]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[ 1634.296692][T18133]  __se_sys_ioctl+0x23c/0x400
[ 1634.301581][T18133]  __x64_sys_ioctl+0x97/0xe0
[ 1634.306380][T18133]  x64_sys_call+0x18a7/0x3e70
[ 1634.311256][T18133]  do_syscall_64+0xc9/0xf80
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1634.315946][T18133]  ? clear_bhb_loop+0x40/0x90
[ 1634.320795][T18133]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1634.326856][T18133] RIP: 0033:0x7f37a239acb9
[ 1634.331396][T18133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1634.351171][T18133] RSP: 002b:00007f37a31a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1634.359753][T18133] RAX: ffffffffffffffda RBX: 00007f37a2616090 RCX: 00007f37a239acb9
[ 1634.367855][T18133] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003
[ 1634.375948][T18133] RBP: 00007f37a2408bf7 R08: 0000000000000000 R09: 0000000000000000
[ 1634.384019][T18133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1634.392090][T18133] R13: 00007f37a2616128 R14: 00007f37a2616090 R15: 00007ffc18863718
[ 1634.400223][T18133]  </TASK>
[ 1634.403760][T18133] Kernel Offset: disabled
[ 1634.408135][T18133] Rebooting in 86400 seconds..