last executing test programs:

19.618544198s ago: executing program 3 (id=2760):
semget$private(0x0, 0x4000000009, 0x0)
semop(0x0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1)
semop(0x0, &(0x7f0000000100)=[{0x2, 0xd5db}], 0x1)
semop(0x0, &(0x7f0000000140)=[{0x2, 0xc, 0x1000}], 0x1)

19.53474346s ago: executing program 3 (id=2761):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80)
syz_io_uring_setup(0x4f88, &(0x7f00000020c0)={0x0, 0xb5c9, 0x80, 0x1, 0x6a}, &(0x7f0000002140), &(0x7f0000002180))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
vmsplice(r4, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0)
r5 = syz_open_dev$dri(0x0, 0x0, 0x20800)
write$binfmt_elf32(r5, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x33, 0x8, 0x7e, 0x353e77d1, 0x2, 0x6, 0x2, 0x10b, 0x38, 0x3a4, 0x4, 0xed, 0x20, 0x1, 0x8000, 0x0, 0x6}, [{0x2, 0x3, 0x5, 0x401, 0x6, 0x10000, 0x10001, 0x3ff}], "5c465e5ba6d42272d2e673b85b8782465e87f055293643f397367a6e19b7728ac58886df30a670abc85edf5fd218aa711b0bd932f14620a08dd6eb313a4be104611c6448d63bd310c251ac692ff9d442cdb40c857bd9c9fc054532f48dc7d59faad93af0ee0dc1f80776fd04dc5ac265a51c7bd6eaadc0efd7158e8468c410926655"}, 0xda)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
socket(0x10, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x115, r6}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
r8 = socket$tipc(0x1e, 0x2, 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r9, &(0x7f0000000080)={0x2020}, 0x2020)
setsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, &(0x7f0000000000)=0x4, 0x7)

16.765052752s ago: executing program 3 (id=2776):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80)
syz_io_uring_setup(0x4f88, &(0x7f00000020c0)={0x0, 0xb5c9, 0x80, 0x1, 0x6a}, &(0x7f0000002140), &(0x7f0000002180))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
vmsplice(r4, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0)
r5 = syz_open_dev$dri(0x0, 0x0, 0x20800)
write$binfmt_elf32(r5, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x33, 0x8, 0x7e, 0x353e77d1, 0x2, 0x6, 0x2, 0x10b, 0x38, 0x3a4, 0x4, 0xed, 0x20, 0x1, 0x8000, 0x0, 0x6}, [{0x2, 0x3, 0x5, 0x401, 0x6, 0x10000, 0x10001, 0x3ff}], "5c465e5ba6d42272d2e673b85b8782465e87f055293643f397367a6e19b7728ac58886df30a670abc85edf5fd218aa711b0bd932f14620a08dd6eb313a4be104611c6448d63bd310c251ac692ff9d442cdb40c857bd9c9fc054532f48dc7d59faad93af0ee0dc1f80776fd04dc5ac265a51c7bd6eaadc0efd715"}, 0xd2)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
socket(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x115}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r7, &(0x7f0000000080)={0x2020}, 0x2020)

15.000994731s ago: executing program 3 (id=2787):
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x1000000)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'})
socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)='y', 0x1}], 0x1}}], 0x1, 0x0)

14.720518592s ago: executing program 3 (id=2789):
socket$netlink(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f00000000c0)=0x7a, 0x4)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom(r2, 0x0, 0x30, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0)

13.767269168s ago: executing program 3 (id=2795):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f000000d380))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='mm_page_alloc\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)

8.424894473s ago: executing program 2 (id=2809):
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x21)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, 0x0)
r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)='ex')
keyctl$describe(0x6, r4, &(0x7f0000000380)=""/72, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
capget(&(0x7f00000000c0)={0x20071026}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc)
chroot(&(0x7f0000000180)='./file0\x00')
socket$netlink(0x10, 0x3, 0x0)

7.649408534s ago: executing program 1 (id=2810):
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x1000000)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'})
socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)='y', 0x1}], 0x1}}], 0x1, 0x0)

7.473483982s ago: executing program 1 (id=2812):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket(0xa, 0x3, 0x81)
setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x29, 0x48, 0x0, 0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@cgroup=<r3=>r1, 0x6, 0x1, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet6(0xa, 0x1, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000ac0)=ANY=[@ANYRESOCT], &(0x7f0000000bc0)=ANY=[@ANYBLOB="00030498fec073030a04afcdfdf6ca9f6f776c4a60ea23aa", @ANYBLOB="d339827eed36f1df4756508f761eabe38ca4d1271dcdc818ee30a4aecac344c24d96ac2709dd334317fd9511743b4a096c60d21bfdb8f1cc24312123403d8ef7cf054e87e674a931aa6a79e850e26a1d452272723cf3db39f3649740f2488f6c75b834dca57dc678f88af3131d226f4da8ce65a5a97544eba2ce05dd53673ec6bfe03b26101ca1ea96cbf0a84dcd7a0795d1860a439ec05ecf980fa4893c61b96120ee3dedb8569cb6b5daf1f018346dded50f", @ANYRES8=r0]}, &(0x7f00000005c0)={0x44, 0x0, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000100)={0x20, 0x81, 0x3, "16a414"}, &(0x7f0000000380)={0x20, 0x82, 0x1, '5'}, &(0x7f0000000b80)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r3], &(0x7f0000000480)={0x20, 0x84, 0x4, "5651ba9a"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "a4af5e"}})
syz_usb_control_io$uac1(r0, &(0x7f0000000340)={0x14, &(0x7f0000000240)={0x0, 0x30, 0x60, {0x60, 0xb, "6398d012557070e2216781f7bf665d7b085a85b3177348a620b6f33bcb52c735ae2df3e13c1ae8915355f102828de7778291b2bd09c0600626920bf49543de4c14f26f1cec9969cb3a717e6f980766acef58fbf936900786d0181d451ab8"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}}, &(0x7f0000000a00)={0x44, &(0x7f00000007c0)={0x0, 0x17, 0xa3, "e630416869464506f6de5984d2a52739d98c5293084db2d774fe390396d7ae67d134cc34de0faf12bd70d0b1e58dbbe3851d5bb55cd7330b11a59795bbc913b19449958834cbdb0f0b0f6dea9db57788596f2193981f6dc21ec4ff7074c5c8f5c33861f70d3fda8f12e5ec07c49e0ed287525731be7f15e73bdeb4d93b60b1f7c1db38bf1671bc7970c2ac411ffe4789ebad9957366f691e36ed85b1eb670bc8d23321"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000540)={0x20, 0x81, 0x3, "ba9051"}, &(0x7f0000000880)=ANY=[@ANYBLOB="2071020800002fa3"], &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000000087e4"], &(0x7f0000000980)={0x20, 0x84, 0x2, "837c"}, &(0x7f00000009c0)={0x20, 0x85, 0x3, "7b699e"}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x0, 0x0, 0x28, "227930e5ffe564d73bdc90fbc2fafefcc0c3596724dcb0fde633e1e3c87f2557072dd0f086674b4a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6.997540796s ago: executing program 2 (id=2815):
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
iopl(0x3)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
getsockopt$sock_int(r1, 0x1, 0x2, 0x0, &(0x7f0000001140))
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)

6.730324917s ago: executing program 0 (id=2817):
socket$nl_route(0x10, 0x3, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x7a05, 0x1700)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async)
fsmount(0xffffffffffffffff, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000018110000b7de07a72c6b76056a2c9b1d46a8b5d6d85ce0087028762e76bff16807f9e8a43cf6d9be1f47c8d349390880d93f4492aa06e4ced367198fc088698371f93d8eca9b4c7dccb19bced45cc56664c6a0551895d4b9113f15c9567a7a91ff9e45f64dfcf10000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x90) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r3}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0xc0189436, 0x0)
r5 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r5, 0x4)
unshare(0x20000400) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async)
close(r6) (async)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0xb0}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) (async)
mount$9p_fd(0x20000000, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000cd23b5bf9932e928b58ddf1aebbbf8607350e1d824185209382a758bcb12f585d15fed7dc153a8615b09d68cc0c101dcdf82111dffb7e0b6e55576c155e32345e5d4f1"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
dup(r8)

6.58705341s ago: executing program 0 (id=2819):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111}}, 0x20)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0xfff}], 0x3)

6.527779282s ago: executing program 0 (id=2820):
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1)
pipe(&(0x7f0000000140))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01004000"/17])
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)

6.085607801s ago: executing program 2 (id=2821):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000600)=@newlink={0x4c, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x50100}, [@IFLA_LINK={0x8}, @IFLA_VF_PORTS={0x4}, @IFLA_NET_NS_FD={0x8}, @IFLA_PHYS_SWITCH_ID={0x16, 0x24, "78a6885a6a1c6bebc9e1dc2542ba4a1fda5a"}]}, 0x4c}}, 0x0)
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='mm_page_alloc\x00', r2}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r1, 0x0, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0)
sendfile(r4, r4, 0x0, 0x10000a006)
syz_open_dev$usbfs(0x0, 0xa37, 0x2)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xee, 0xa, 0xca, 0x10, 0x1b80, 0xc161, 0xce43, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x39, 0x52, 0xea, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x80, 0x1}}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0xd, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf2, 0x7}]}}]}}]}}]}}, 0x0)
socket$tipc(0x1e, 0x4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, r6, 0xd9b2794f6a139537, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0)
r8 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe)
r9 = fcntl$dupfd(r8, 0x0, r8)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r9, 0x0)
ftruncate(r9, 0x1000000)

5.473213746s ago: executing program 0 (id=2822):
write(0xffffffffffffffff, &(0x7f0000000140)="fc00000018004b61ab092500090007000a100200000000020000369321000500ff", 0x21)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="f4", 0x1}], 0x49, 0x0, 0x0, 0x20040090}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES16], 0x48}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040))
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000340)=0x6000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5.245007507s ago: executing program 0 (id=2823):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500))
ptrace(0x8, r0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f00000000c0)=0x1f, 0x4)
sendto$inet(r3, &(0x7f0000000100)="1ce0", 0xffeb, 0x900, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioprio_set$pid(0x0, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000010401840000000000000000009e210000000a000200000000001c0000000500010001000000"], 0x28}}, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10)
sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

4.749451188s ago: executing program 4 (id=2825):
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x21)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, 0x0)
r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)='ex')
keyctl$describe(0x6, r4, &(0x7f0000000380)=""/72, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
capget(&(0x7f00000000c0)={0x20071026}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc)
chroot(&(0x7f0000000180)='./file0\x00')
socket$netlink(0x10, 0x3, 0x0)

4.610581988s ago: executing program 2 (id=2826):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

4.401385335s ago: executing program 2 (id=2827):
creat(0x0, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
readv(r1, &(0x7f0000000580)=[{0x0}], 0x1)

3.489203322s ago: executing program 4 (id=2829):
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x28000801)
r0 = socket(0x22, 0xa, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1a, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRES64, @ANYRES64], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000200))
ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async)
ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_GETISPACE(r2, 0x800c5011, &(0x7f00000001c0))
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000340)={0x3, 0x7e}) (async)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000340)={0x3, 0x7e})
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) (async)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4})
userfaultfd(0x0) (async)
userfaultfd(0x0)
syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x480000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) (async)
mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200280, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200280, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x10000}) (async)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x10000})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000380)=""/113, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) (async)
write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00'}, 0x65) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000001ac0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000002f81b0e17d802cfb227e656a3698c79205e02f1561b0010095448e9f7024b45fb2006c9117fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab02174911d5e51b76d2c31b8bece7b0f841f393c401d8f51383f0f28d4c00fa2149870f1779f20292b42f01b0bb114fa6e1889a6437285a0c9f00c4245e4d3524af00636736e812558294430bf4b365e0a9c468c9eb4977fb131145e0179c4ddb37a6704a36503e63d66ddcf9b8e1035383b90de09d000c223ffb7f13624e3ac52b248f92d041959c1f7985eb94aad8c0adf4e8730313d1b02662c6847a9851f40a969486ebbe7bfcb5b28fc7dbe1bb80c4a2c18a53fecb21e51de5ce7712ee9cdd87cd3b4055759049bab8dd71ff26ba5983940000000000000008aef87c67751181ba882eee9da372807d05d0786a2b12c00000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65)

3.488385458s ago: executing program 1 (id=2830):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111}}, 0x20)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a", 0xfff}], 0x3)

3.473891526s ago: executing program 2 (id=2831):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="0f3800bbf540dceb260f015f009d0f6f140f20d86635080000000f22d867660f38022066b96c0800000f322e2e0f88070066b9800000c00f326635010000000f30", 0x41}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace(0x8, r4)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8936, &(0x7f0000000280)={'virt_wifi0\x00', @ifru_mtu})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0)
r5 = dup(r2)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100feffffff000000000c00000008000300", @ANYRES32=r9, @ANYBLOB="0c005080080007000200000004000a00110007003d6d915cfc00950b8fdf1fb2790000dbc316b9c9f9136f00"], 0x48}}, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x25)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000})
ioctl$KVM_NMI(r6, 0xae9a)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

3.379684578s ago: executing program 1 (id=2832):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.20930293s ago: executing program 4 (id=2833):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={<r2=>0x0, @in6={{0xa, 0x4e22, 0x9, @private2}}, 0x0, 0x3, 0x4, 0x7fffffff}, &(0x7f0000000080)=0x98)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000240)={r2, @in={{0x2, 0x4e24, @multicast1}}, 0xfffffff7, 0x49, 0x200, 0x266, 0x4}, &(0x7f0000000300)=0x98)
sendmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c000011)
socket(0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480), 0x0, 0xfffffffffffffffd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0x6)
ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4})
r5 = userfaultfd(0x80001)
ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000340))
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000380))
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r6, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"})
syz_open_pts(0xffffffffffffffff, 0x801)

3.125220907s ago: executing program 1 (id=2834):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c)
r3 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r3, 0x114, 0x271c, 0x0, &(0x7f00000000c0))

2.811822829s ago: executing program 4 (id=2835):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0)
mkdir(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0), 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x3, 0xc}}], 0x30}], 0x1, 0x0)

544.282308ms ago: executing program 0 (id=2836):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80)
syz_io_uring_setup(0x4f88, &(0x7f00000020c0)={0x0, 0xb5c9, 0x80, 0x1, 0x6a}, &(0x7f0000002140), &(0x7f0000002180))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
vmsplice(r4, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0)
r5 = syz_open_dev$dri(0x0, 0x0, 0x20800)
write$binfmt_elf32(r5, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x33, 0x8, 0x7e, 0x353e77d1, 0x2, 0x6, 0x2, 0x10b, 0x38, 0x3a4, 0x4, 0xed, 0x20, 0x1, 0x8000, 0x0, 0x6}, [{0x2, 0x3, 0x5, 0x401, 0x6, 0x10000, 0x10001, 0x3ff}], "5c465e5ba6d42272d2e673b85b8782465e87f055293643f397367a6e19b7728ac58886df30a670abc85edf5fd218aa711b0bd932f14620a08dd6eb313a4be104611c6448d63bd310c251ac692ff9d442cdb40c857bd9c9fc054532f48dc7d59faad93af0ee0dc1f80776fd04dc5ac265a51c7bd6eaadc0efd715"}, 0xd2)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
socket(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x115}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r7, &(0x7f0000000080)={0x2020}, 0x2020)

344.083473ms ago: executing program 4 (id=2837):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

217.348832ms ago: executing program 4 (id=2838):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x2000, 0x103)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0xa, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000}, 0x38)
r1 = socket$inet6(0xa, 0x3, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r2 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140))
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f0000005540)=[{0x1, 0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/176, 0xb0}], &(0x7f00000002c0)=[0x5ed, 0x9, 0x6, 0x3, 0x1]}, {0x2, 0x1, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/6, 0x6}, {&(0x7f0000000340)=""/46, 0x2e}], &(0x7f00000003c0)=[0x1, 0x81, 0x8]}, {0x3, 0x1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/103, 0x67}, {&(0x7f0000000480)=""/98, 0x62}, {&(0x7f0000000500)=""/61, 0x3d}], &(0x7f0000000580)=[0x1, 0x1, 0x80000001, 0x6, 0x401, 0x20, 0x9, 0x101]}, {0xa, 0x0, 0x0, &(0x7f0000002980)=[{&(0x7f00000005c0)=""/153, 0x99}, {&(0x7f0000000680)=""/11, 0xb}, {&(0x7f00000006c0)=""/155, 0x9b}, {&(0x7f0000000780)=""/123, 0x7b}, {&(0x7f0000000800)=""/4, 0x4}, {&(0x7f0000000840)=""/52, 0x34}, {&(0x7f0000000880)=""/146, 0x92}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/13, 0xd}, {&(0x7f0000001980)=""/4096, 0x1000}], &(0x7f0000002a40)=[0x4a, 0x1]}, {0x8, 0x1, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002a80)=""/228, 0xe4}, {&(0x7f0000002b80)=""/24, 0x18}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f0000002c40)=""/42, 0x2a}, {&(0x7f0000002c80)=""/13, 0xd}, {&(0x7f0000002cc0)=""/212, 0xd4}, {&(0x7f0000002dc0)=""/29, 0x1d}, {&(0x7f0000002e00)=""/181, 0xb5}], &(0x7f0000002f40)=[0x5, 0xfffffffffffffffb, 0x1]}, {0xa, 0x1, 0x0, &(0x7f0000005440)=[{&(0x7f0000002f80)=""/40, 0x28}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/18, 0x12}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000005000)=""/195, 0xc3}, {&(0x7f0000005100)=""/26, 0x1a}, {&(0x7f0000005140)=""/194, 0xc2}, {&(0x7f0000005240)=""/181, 0xb5}, {&(0x7f0000005300)=""/52, 0x34}, {&(0x7f0000005340)=""/209, 0xd1}], &(0x7f0000005500)=[0x200]}], 0x6)

0s ago: executing program 1 (id=2839):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket(0xa, 0x3, 0x81)
setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x29, 0x48, 0x0, 0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@cgroup=<r3=>r1, 0x6, 0x1, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet6(0xa, 0x1, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000ac0)=ANY=[@ANYRESOCT], &(0x7f0000000bc0)=ANY=[@ANYBLOB="00030498fec073030a04afcdfdf6ca9f6f776c4a60ea23aa", @ANYBLOB="d339827eed36f1df4756508f761eabe38ca4d1271dcdc818ee30a4aecac344c24d96ac2709dd334317fd9511743b4a096c60d21bfdb8f1cc24312123403d8ef7cf054e87e674a931aa6a79e850e26a1d452272723cf3db39f3649740f2488f6c75b834dca57dc678f88af3131d226f4da8ce65a5a97544eba2ce05dd53673ec6bfe03b26101ca1ea96cbf0a84dcd7a0795d1860a439ec05ecf980fa4893c61b96120ee3dedb8569cb6b5daf1f018346dded50f", @ANYRES8=r0]}, &(0x7f00000005c0)={0x44, 0x0, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000100)={0x20, 0x81, 0x3, "16a414"}, &(0x7f0000000380)={0x20, 0x82, 0x1, '5'}, &(0x7f0000000b80)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r3], &(0x7f0000000480)={0x20, 0x84, 0x4, "5651ba9a"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "a4af5e"}})
syz_usb_control_io$uac1(r0, &(0x7f0000000340)={0x14, &(0x7f0000000240)={0x0, 0x30, 0x60, {0x60, 0xb, "6398d012557070e2216781f7bf665d7b085a85b3177348a620b6f33bcb52c735ae2df3e13c1ae8915355f102828de7778291b2bd09c0600626920bf49543de4c14f26f1cec9969cb3a717e6f980766acef58fbf936900786d0181d451ab8"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}}, &(0x7f0000000a00)={0x44, &(0x7f00000007c0)={0x0, 0x17, 0xa3, "e630416869464506f6de5984d2a52739d98c5293084db2d774fe390396d7ae67d134cc34de0faf12bd70d0b1e58dbbe3851d5bb55cd7330b11a59795bbc913b19449958834cbdb0f0b0f6dea9db57788596f2193981f6dc21ec4ff7074c5c8f5c33861f70d3fda8f12e5ec07c49e0ed287525731be7f15e73bdeb4d93b60b1f7c1db38bf1671bc7970c2ac411ffe4789ebad9957366f691e36ed85b1eb670bc8d23321"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000540)={0x20, 0x81, 0x3, "ba9051"}, &(0x7f0000000880)=ANY=[@ANYBLOB="2071020800002fa3"], &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000000087e4"], &(0x7f0000000980)={0x20, 0x84, 0x2, "837c"}, &(0x7f00000009c0)={0x20, 0x85, 0x3, "7b699e"}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x0, 0x0, 0x28, "227930e5ffe564d73bdc90fbc2fafefcc0c3596724dcb0fde633e1e3c87f2557072dd0f086674b4a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.673176][ T5220] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  518.866723][ T5220] usb 1-1: Using ep0 maxpacket: 16
[  518.880971][ T5220] usb 1-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config
[  518.901579][ T5220] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  518.939738][ T5220] usb 1-1: New USB device found, idVendor=1b80, idProduct=c161, bcdDevice=ce.43
[  518.972682][ T5220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.980950][ T5220] usb 1-1: Product: syz
[  518.989123][ T5220] usb 1-1: Manufacturer: syz
[  518.994433][ T5220] usb 1-1: SerialNumber: syz
[  519.001391][ T5220] usb 1-1: config 0 descriptor??
[  519.124019][   T51] team0: Port device geneve1 removed
[  519.447780][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  519.467083][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  519.483085][   T58] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  519.494408][   T51] bond0 (unregistering): (slave team0): Releasing backup interface
[  519.519264][   T51] bond0 (unregistering): Released all slaves
[  519.596060][ T5220] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  519.625485][ T5220] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  519.640698][   T51] : left promiscuous mode
[  519.669228][ T5220] usb 1-1: USB disconnect, device number 58
[  519.713268][   T58] usb 2-1: Using ep0 maxpacket: 16
[  519.737162][ T5123] usb 5-1: USB disconnect, device number 57
[  519.764265][   T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  519.807008][   T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  519.817670][   T58] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  519.832657][   T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.852169][   T58] usb 2-1: config 0 descriptor??
[  519.905185][   T51] tipc: Left network mode
[  519.982936][   T51] IPVS: stopping master sync thread 8192 ...
[  520.012490][ T5089] Bluetooth: hci0: command tx timeout
[  520.160531][T13027] chnl_net:caif_netlink_parms(): no params data found
[  520.371666][T13053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  520.418416][T13053] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  520.463682][   T58] hid (null): unknown global tag 0xd
[  520.482424][   T58] hid (null): unknown global tag 0xe
[  520.507650][   T58] hid (null): report_id 908678640 is invalid
[  520.524010][   T58] hid (null): report_id 12511 is invalid
[  520.581225][   T58] hid-generic 0003:0158:0100.0041: unknown main item tag 0x1
[  520.598095][T13071] vlan2: entered promiscuous mode
[  520.608633][T13071] syz_tun: entered promiscuous mode
[  520.626439][   T58] hid-generic 0003:0158:0100.0041: unexpected long global item
[  520.655392][   T58] hid-generic 0003:0158:0100.0041: probe with driver hid-generic failed with error -22
[  520.702880][T13071] syz_tun: left promiscuous mode
[  520.748352][   T58] usb 2-1: USB disconnect, device number 72
[  520.827617][   T51] hsr_slave_0: left promiscuous mode
[  520.850895][ T5075] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  520.863909][   T51] hsr_slave_1: left promiscuous mode
[  520.869948][ T5075] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  520.897277][ T5075] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  520.904567][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  520.916844][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  520.926212][ T5075] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  520.934316][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  520.949579][ T5075] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  520.949584][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  520.957651][ T5220] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  520.984127][ T5075] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  521.029884][   T51] veth1_macvtap: left promiscuous mode
[  521.035933][   T51] veth0_macvtap: left promiscuous mode
[  521.041680][   T51] veth1_vlan: left promiscuous mode
[  521.047781][   T51] veth0_vlan: left promiscuous mode
[  521.202516][ T5220] usb 3-1: Using ep0 maxpacket: 16
[  521.211985][ T5220] usb 3-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config
[  521.236780][ T5220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  521.288554][ T5220] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191
[  521.303899][ T5220] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  521.318213][ T5220] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  521.332507][ T5220] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  521.357821][ T5220] usb 3-1: Manufacturer: syz
[  521.386414][ T5220] usb 3-1: config 0 descriptor??
[  521.430393][   T51] pim6reg (unregistering): left allmulticast mode
[  521.755427][ T5220] rc_core: IR keymap rc-hauppauge not found
[  522.093654][ T5075] Bluetooth: hci0: command tx timeout
[  522.303140][ T5220] Registered IR keymap rc-empty
[  522.559214][ T5220] mceusb 3-1:0.0: Error: mce write urb status = -71
[  522.592568][ T5220] mceusb 3-1:0.0: Error: mce write urb status = -71
[  522.638876][ T5220] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  522.653821][ T5220] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input46
[  522.674195][ T5220] mceusb 3-1:0.0: Error: mce write urb status = -71
[  522.723412][ T5220] mceusb 3-1:0.0: Error: mce write urb status = -71
[  522.763954][ T5220] mceusb 3-1:0.0: Error: mce write urb status = -71
[  522.792960][ T5220] mceusb 3-1:0.0: Error: mce write urb status = -71
[  522.808129][   T51] team0 (unregistering): Port device virt_wifi0 removed
[  522.846960][ T5220] mceusb 3-1:0.0: Error: mce write urb status = -71
[  522.884755][ T5220] mceusb 3-1:0.0: Error: mce write urb status = -71
[  522.921034][ T5220] mceusb 3-1:0.0: Error: mce write urb status = -71
[  522.966147][ T5220] mceusb 3-1:0.0: Error: mce write urb status = -71
[  523.004166][ T5220] mceusb 3-1:0.0: Error: mce write urb status = -71
[  523.019092][ T5125] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  523.048033][ T5220] mceusb 3-1:0.0: Error: mce write urb status = -71
[  523.052981][ T5089] Bluetooth: hci1: command tx timeout
[  523.089733][ T5220] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  523.097977][ T5220] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  523.128521][   T51] team0 (unregistering): Port device team_slave_1 removed
[  523.139776][ T5220] usb 3-1: USB disconnect, device number 54
[  523.214719][ T5125] usb 2-1: Using ep0 maxpacket: 16
[  523.221543][ T5125] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  523.236926][   T51] team0 (unregistering): Port device team_slave_0 removed
[  523.254762][ T5125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  523.266172][ T5125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  523.284651][ T5125] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  523.303988][ T5125] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  523.341777][ T5125] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  523.358615][ T5125] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  523.367452][ T5125] usb 2-1: Manufacturer: syz
[  523.378271][ T5125] usb 2-1: config 0 descriptor??
[  523.692413][ T5125] rc_core: IR keymap rc-hauppauge not found
[  523.698734][ T5125] Registered IR keymap rc-empty
[  523.704809][ T5125] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  523.752361][ T5125] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  523.800010][ T5125] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  523.816485][ T5125] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input47
[  523.845776][ T5125] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  523.892959][ T5125] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  523.902483][T13110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2313'.
[  523.926715][T13113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2314'.
[  523.933974][ T5125] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  523.976552][ T5125] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  524.004244][T13027] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.012880][ T5125] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  524.032057][T13027] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.041152][T13027] bridge_slave_0: entered allmulticast mode
[  524.050280][T13027] bridge_slave_0: entered promiscuous mode
[  524.064647][T13027] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.077852][ T5125] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  524.091768][T13027] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.107294][T13027] bridge_slave_1: entered allmulticast mode
[  524.122374][ T5125] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  524.132174][T13027] bridge_slave_1: entered promiscuous mode
[  524.172517][ T5125] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  524.174122][ T5089] Bluetooth: hci0: command tx timeout
[  524.220053][ T5125] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  524.314290][ T5125] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  524.358435][T13027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  524.370680][ T5125] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  524.392534][ T5125] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  524.401336][T13027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  524.455040][ T5125] usb 2-1: USB disconnect, device number 73
[  524.502416][ T5122] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  524.548799][T13027] team0: Port device team_slave_0 added
[  524.565400][T13027] team0: Port device team_slave_1 added
[  524.572464][  T784] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  524.620418][T13027] batman_adv: batadv0: Adding interface: batadv_slave_0
[  524.627671][T13027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  524.658240][T13027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  524.712344][ T5122] usb 3-1: Using ep0 maxpacket: 16
[  524.725168][ T5122] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=83.7a
[  524.749863][ T5122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.772511][  T784] usb 1-1: Using ep0 maxpacket: 16
[  524.791287][ T5122] usb 3-1: Product: syz
[  524.796825][   T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  524.797370][  T784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  524.819559][ T5122] usb 3-1: Manufacturer: syz
[  524.826632][ T5122] usb 3-1: SerialNumber: syz
[  524.839350][ T5122] usb 3-1: config 0 descriptor??
[  524.845868][   T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.850759][  T784] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  524.871569][ T5122] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[  524.890269][  T784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.923181][  T784] usb 1-1: config 0 descriptor??
[  524.956268][T13027] batman_adv: batadv0: Adding interface: batadv_slave_1
[  524.989515][T13027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  525.021640][T13027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  525.065945][   T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  525.075347][ T5122] gspca_sn9c2028: read1 error -71
[  525.082692][ T5122] gspca_sn9c2028: read1 error -71
[  525.087793][   T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.125457][ T5122] gspca_sn9c2028: read1 error -71
[  525.133017][ T5089] Bluetooth: hci1: command tx timeout
[  525.162050][T13126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  525.170678][ T5122] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71
[  525.176496][T13126] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  525.228292][ T5122] usb 3-1: USB disconnect, device number 55
[  525.346551][   T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  525.359074][   T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.405452][T13027] hsr_slave_0: entered promiscuous mode
[  525.412915][T13027] hsr_slave_1: entered promiscuous mode
[  525.431787][T13027] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  525.441285][T13027] Cannot create hsr debugfs directory
[  525.488687][   T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  525.515565][   T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.516515][  T784] usbhid 1-1:0.0: can't add hid device: -71
[  525.548623][  T784] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  525.597278][  T784] usb 1-1: USB disconnect, device number 59
[  526.252835][ T5089] Bluetooth: hci0: command tx timeout
[  526.840023][T13083] chnl_net:caif_netlink_parms(): no params data found
[  526.850029][T13164] vhci_hcd: default hub control req: 0200 v0000 i0000 l0
[  526.881437][T13165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2324'.
[  527.013819][   T51] bridge_slave_1: left allmulticast mode
[  527.019533][   T51] bridge_slave_1: left promiscuous mode
[  527.039253][ T5126] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  527.042881][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.080656][   T51] bridge_slave_0: left allmulticast mode
[  527.089812][   T51] bridge_slave_0: left promiscuous mode
[  527.099168][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.214091][ T5089] Bluetooth: hci1: command tx timeout
[  527.242347][ T5126] usb 2-1: Using ep0 maxpacket: 16
[  527.250831][ T5126] usb 2-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config
[  527.265781][ T5126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  527.277293][ T5126] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191
[  527.287908][ T5126] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  527.309503][ T5126] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  527.318854][ T5126] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  527.334021][ T5126] usb 2-1: Manufacturer: syz
[  527.350852][ T5126] usb 2-1: config 0 descriptor??
[  527.418465][   T51] team0: Port device geneve1 removed
[  527.648601][ T5126] rc_core: IR keymap rc-hauppauge not found
[  527.654863][ T5126] Registered IR keymap rc-empty
[  527.660210][ T5126] mceusb 2-1:0.0: Error: mce write urb status = -71
[  527.702106][ T5126] mceusb 2-1:0.0: Error: mce write urb status = -71
[  527.738249][ T5126] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  527.753609][ T5126] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input48
[  527.770746][ T5126] mceusb 2-1:0.0: Error: mce write urb status = -71
[  527.818565][ T5126] mceusb 2-1:0.0: Error: mce write urb status = -71
[  527.862548][ T5126] mceusb 2-1:0.0: Error: mce write urb status = -71
[  527.873583][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  527.909502][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  527.922486][ T5126] mceusb 2-1:0.0: Error: mce write urb status = -71
[  527.929984][   T51] bond0 (unregistering): (slave team0): Releasing backup interface
[  527.940936][   T51] bond0 (unregistering): Released all slaves
[  527.962608][ T5126] mceusb 2-1:0.0: Error: mce write urb status = -71
[  528.009657][T13173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2325'.
[  528.019605][ T5126] mceusb 2-1:0.0: Error: mce write urb status = -71
[  528.062577][ T5126] mceusb 2-1:0.0: Error: mce write urb status = -71
[  528.093644][ T5126] mceusb 2-1:0.0: Error: mce write urb status = -71
[  528.152612][ T5126] mceusb 2-1:0.0: Error: mce write urb status = -71
[  528.207553][ T5126] mceusb 2-1:0.0: Error: mce write urb status = -71
[  528.220308][   T51] : left promiscuous mode
[  528.264370][ T5126] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  528.283434][ T5126] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  528.324078][ T5126] usb 2-1: USB disconnect, device number 74
[  528.404590][   T51] IPVS: stopping master sync thread 8389 ...
[  529.303795][ T5089] Bluetooth: hci1: command tx timeout
[  529.615031][T13083] bridge0: port 1(bridge_slave_0) entered blocking state
[  529.649856][T13083] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.684134][T13083] bridge_slave_0: entered allmulticast mode
[  529.691342][T13083] bridge_slave_0: entered promiscuous mode
[  529.720242][T13083] bridge0: port 2(bridge_slave_1) entered blocking state
[  529.742415][T13083] bridge0: port 2(bridge_slave_1) entered disabled state
[  529.750027][T13083] bridge_slave_1: entered allmulticast mode
[  529.766622][T13083] bridge_slave_1: entered promiscuous mode
[  529.893497][   T51] hsr_slave_0: left promiscuous mode
[  529.899449][   T51] hsr_slave_1: left promiscuous mode
[  529.907122][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  529.915656][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  529.923684][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  529.931105][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  529.956805][   T51] veth1_macvtap: left promiscuous mode
[  529.962618][   T51] veth0_macvtap: left promiscuous mode
[  529.968240][   T51] veth1_vlan: left promiscuous mode
[  529.973785][   T51] veth0_vlan: left promiscuous mode
[  530.103251][ T5123] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  530.159475][   T51] pim6reg (unregistering): left allmulticast mode
[  530.322420][ T5123] usb 1-1: Using ep0 maxpacket: 16
[  530.333263][ T5123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  530.345353][ T5123] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  530.354817][ T5123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.368882][ T5123] usb 1-1: config 0 descriptor??
[  530.398244][   T51] team0 (unregistering): Port device virt_wifi0 removed
[  530.585289][T13206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  530.617823][T13206] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  530.749020][   T51] team0 (unregistering): Port device team_slave_1 removed
[  530.808483][   T51] team0 (unregistering): Port device team_slave_0 removed
[  530.847738][ T5123] usbhid 1-1:0.0: can't add hid device: -71
[  530.858011][ T5123] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  530.898308][ T5123] usb 1-1: USB disconnect, device number 60
[  531.614558][T13083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  531.767559][T13083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  532.007094][T13083] team0: Port device team_slave_0 added
[  532.031227][T13083] team0: Port device team_slave_1 added
[  532.136693][T13083] batman_adv: batadv0: Adding interface: batadv_slave_0
[  532.149103][T13083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  532.186487][T13083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  532.202637][T13083] batman_adv: batadv0: Adding interface: batadv_slave_1
[  532.209660][T13083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  532.237367][T13083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  532.251345][T13227] netlink: 'syz.2.2337': attribute type 10 has an invalid length.
[  532.259439][ T5220] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  532.413314][T13083] hsr_slave_0: entered promiscuous mode
[  532.420730][T13083] hsr_slave_1: entered promiscuous mode
[  532.479376][ T5220] usb 2-1: Using ep0 maxpacket: 16
[  532.490022][ T5220] usb 2-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config
[  532.505949][ T5220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  532.542366][ T5220] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191
[  532.579437][ T5220] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  532.629108][ T5220] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  532.649406][ T5220] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  532.649538][T13027] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  532.682526][ T5220] usb 2-1: Manufacturer: syz
[  532.695524][T13027] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  532.710491][ T5220] usb 2-1: config 0 descriptor??
[  532.723615][T13027] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  532.764148][T13027] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  533.154960][ T5220] rc_core: IR keymap rc-hauppauge not found
[  533.160911][ T5220] Registered IR keymap rc-empty
[  533.275516][ T5220] mceusb 2-1:0.0: Error: mce write urb status = -71
[  533.892592][ T5220] mceusb 2-1:0.0: Error: mce write urb status = -71
[  533.943419][ T5220] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  533.997165][ T5220] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input49
[  534.062623][ T5220] mceusb 2-1:0.0: Error: mce write urb status = -71
[  534.090745][    C1] rc rc0: IR event FIFO is full!
[  534.095760][    C1] rc rc0: IR event FIFO is full!
[  534.100964][    C1] rc rc0: IR event FIFO is full!
[  534.105940][    C1] rc rc0: IR event FIFO is full!
[  534.110903][    C1] rc rc0: IR event FIFO is full!
[  534.115870][    C1] rc rc0: IR event FIFO is full!
[  534.120853][    C1] rc rc0: IR event FIFO is full!
[  534.125818][    C1] rc rc0: IR event FIFO is full!
[  534.130789][    C1] rc rc0: IR event FIFO is full!
[  534.135767][    C1] rc rc0: IR event FIFO is full!
[  534.141087][    C1] rc rc0: IR event FIFO is full!
[  534.146071][    C1] rc rc0: IR event FIFO is full!
[  534.151291][    C1] rc rc0: IR event FIFO is full!
[  534.156278][    C1] rc rc0: IR event FIFO is full!
[  534.161243][    C1] rc rc0: IR event FIFO is full!
[  534.166204][    C1] rc rc0: IR event FIFO is full!
[  534.171897][    C1] rc rc0: IR event FIFO is full!
[  534.176892][    C1] rc rc0: IR event FIFO is full!
[  534.181853][    C1] rc rc0: IR event FIFO is full!
[  534.186840][    C1] rc rc0: IR event FIFO is full!
[  534.191811][    C1] rc rc0: IR event FIFO is full!
[  534.196780][    C1] rc rc0: IR event FIFO is full!
[  534.201739][    C1] rc rc0: IR event FIFO is full!
[  534.207041][    C1] rc rc0: IR event FIFO is full!
[  534.212460][    C1] rc rc0: IR event FIFO is full!
[  534.217674][    C1] rc rc0: IR event FIFO is full!
[  534.222638][    C1] rc rc0: IR event FIFO is full!
[  534.227594][    C1] rc rc0: IR event FIFO is full!
[  534.232549][    C1] rc rc0: IR event FIFO is full!
[  534.237548][    C1] rc rc0: IR event FIFO is full!
[  534.242800][    C1] rc rc0: IR event FIFO is full!
[  534.247783][    C1] rc rc0: IR event FIFO is full!
[  534.252750][    C1] rc rc0: IR event FIFO is full!
[  534.257712][    C1] rc rc0: IR event FIFO is full!
[  534.262670][    C1] rc rc0: IR event FIFO is full!
[  534.267628][    C1] rc rc0: IR event FIFO is full!
[  534.283604][ T5220] mceusb 2-1:0.0: Error: mce write urb status = -71
[  534.308484][T13027] 8021q: adding VLAN 0 to HW filter on device bond0
[  534.322629][ T5220] mceusb 2-1:0.0: Error: mce write urb status = -71
[  534.352576][ T5220] mceusb 2-1:0.0: Error: mce write urb status = -71
[  534.393411][ T5220] mceusb 2-1:0.0: Error: mce write urb status = -71
[  534.433260][ T5220] mceusb 2-1:0.0: Error: mce write urb status = -71
[  534.450923][T13027] 8021q: adding VLAN 0 to HW filter on device team0
[  534.472878][ T5220] mceusb 2-1:0.0: Error: mce write urb status = -71
[  534.507942][T13248] hub 9-0:1.0: USB hub found
[  534.514743][ T5220] mceusb 2-1:0.0: Error: mce write urb status = -71
[  534.516230][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state
[  534.528620][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state
[  534.530270][T13248] hub 9-0:1.0: 8 ports detected
[  534.569319][ T5220] mceusb 2-1:0.0: Error: mce write urb status = -71
[  534.622670][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state
[  534.629855][ T5122] bridge0: port 2(bridge_slave_1) entered forwarding state
[  534.644087][ T5220] mceusb 2-1:0.0: Error: mce write urb status = -71
[  534.684260][ T5220] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  534.706693][ T5220] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  534.786204][ T5220] usb 2-1: USB disconnect, device number 75
[  534.960770][T13083] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  534.978534][T13083] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  535.017731][T13083] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  535.048219][T13259] vivid-000: disconnect
[  535.066715][T13083] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  535.104094][T13254] vivid-000: reconnect
[  535.497789][T13083] 8021q: adding VLAN 0 to HW filter on device bond0
[  535.549083][T13027] 8021q: adding VLAN 0 to HW filter on device batadv0
[  535.607488][T13083] 8021q: adding VLAN 0 to HW filter on device team0
[  535.666837][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.674130][ T5220] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.736703][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.743914][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  535.819473][T13027] veth0_vlan: entered promiscuous mode
[  535.947624][T13027] veth1_vlan: entered promiscuous mode
[  536.121975][T13027] veth0_macvtap: entered promiscuous mode
[  536.149983][T13027] veth1_macvtap: entered promiscuous mode
[  536.244597][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  536.275137][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.304103][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  536.341391][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.359366][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  536.386514][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.415136][T13027] batman_adv: batadv0: Interface activated: batadv_slave_0
[  536.468422][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  536.495359][ T2456] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  536.501997][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.559118][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  536.620119][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.647272][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  536.670487][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.696544][T13027] batman_adv: batadv0: Interface activated: batadv_slave_1
[  536.815866][T13027] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  536.834333][T13027] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  536.867435][T13027] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  536.887141][T13027] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  537.116896][T13083] 8021q: adding VLAN 0 to HW filter on device batadv0
[  538.092369][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  538.121860][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  538.202512][ T5122] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  538.268807][ T5664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  538.292738][ T5664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  538.402477][ T5122] usb 3-1: Using ep0 maxpacket: 16
[  538.416231][ T5122] usb 3-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config
[  538.428251][T13331] vivid-002: disconnect
[  538.446011][T13326] vivid-002: reconnect
[  538.452815][ T5122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  538.471728][T13083] veth0_vlan: entered promiscuous mode
[  538.491734][ T5122] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191
[  538.537545][ T5122] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  538.538776][T13083] veth1_vlan: entered promiscuous mode
[  538.583887][ T5122] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  538.603512][ T5122] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  538.611589][ T5122] usb 3-1: Manufacturer: syz
[  538.659621][ T5122] usb 3-1: config 0 descriptor??
[  538.660024][T13335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2287'.
[  538.827751][T13083] veth0_macvtap: entered promiscuous mode
[  538.865157][T13083] veth1_macvtap: entered promiscuous mode
[  538.944671][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.974772][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.990101][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.992380][ T5122] rc_core: IR keymap rc-hauppauge not found
[  539.014667][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.028745][ T5122] Registered IR keymap rc-empty
[  539.038704][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  539.044446][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71
[  539.061237][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.086734][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  539.112281][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.123141][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71
[  539.148682][T13083] batman_adv: batadv0: Interface activated: batadv_slave_0
[  539.182497][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  539.188557][ T5122] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  539.204592][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.230612][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  539.257357][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.291861][ T5122] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input50
[  539.300251][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  539.333927][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71
[  539.372924][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71
[  539.381992][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.402694][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71
[  539.421918][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  539.443297][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71
[  539.449315][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.495296][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71
[  539.497914][T13083] batman_adv: batadv0: Interface activated: batadv_slave_1
[  539.550178][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71
[  539.574404][T13083] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  539.604790][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71
[  539.612939][T13083] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  539.637839][T13083] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  539.652728][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71
[  539.655797][T13083] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  539.885599][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71
[  539.922565][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71
[  539.970810][ T5122] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  540.072571][ T5122] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  540.264383][ T5122] usb 3-1: USB disconnect, device number 56
[  542.339793][  T964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.420360][  T964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  542.580527][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.597989][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  542.600934][T13400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2362'.
[  544.094374][T13435] hub 9-0:1.0: USB hub found
[  544.100526][T13435] hub 9-0:1.0: 8 ports detected
[  545.081667][T13443] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0
[  546.789718][T13483] hub 9-0:1.0: USB hub found
[  546.795948][T13483] hub 9-0:1.0: 8 ports detected
[  548.365453][T13509] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0
[  549.070712][T13521] hub 9-0:1.0: USB hub found
[  549.076423][T13521] hub 9-0:1.0: 8 ports detected
[  549.883064][T13523] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0
[  550.462621][   T45] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  550.712037][   T45] usb 5-1: Using ep0 maxpacket: 16
[  550.745246][   T45] usb 5-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config
[  550.766368][   T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  550.811638][   T45] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191
[  550.857136][   T45] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  550.911319][   T45] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  550.933112][   T45] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  550.946497][   T45] usb 5-1: Manufacturer: syz
[  550.964498][   T45] usb 5-1: config 0 descriptor??
[  551.729103][ T5123] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  553.452452][   T45] rc_core: IR keymap rc-hauppauge not found
[  553.472292][   T45] Registered IR keymap rc-empty
[  553.514056][   T45] mceusb 5-1:0.0: Error: mce write urb status = -71
[  553.573983][   T45] mceusb 5-1:0.0: Error: mce write urb status = -71
[  553.599801][ T5123] usb 4-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6
[  553.615218][   T45] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  553.634998][ T5123] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.666209][ T5123] usb 4-1: Product: syz
[  553.692658][ T5123] usb 4-1: Manufacturer: syz
[  553.703111][   T45] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input51
[  553.723612][ T5123] usb 4-1: SerialNumber: syz
[  553.775992][ T5123] usb 4-1: config 0 descriptor??
[  553.964344][ T5123] usb 4-1: Found UVC 0.00 device syz (30c9:0093)
[  553.970802][ T5123] usb 4-1: No valid video chain found.
[  553.991273][   T45] mceusb 5-1:0.0: Error: mce write urb status = -71
[  554.054232][ T5123] usb 4-1: USB disconnect, device number 58
[  554.064523][   T45] mceusb 5-1:0.0: Error: mce write urb status = -71
[  554.153500][   T45] mceusb 5-1:0.0: Error: mce write urb status = -71
[  554.235651][   T45] mceusb 5-1:0.0: Error: mce write urb status = -71
[  554.304057][T13578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2405'.
[  554.322676][   T45] mceusb 5-1:0.0: Error: mce write urb status = -71
[  554.355978][   T45] mceusb 5-1:0.0: Error: mce write urb status = -71
[  554.407846][   T45] mceusb 5-1:0.0: Error: mce write urb status = -71
[  554.452727][   T45] mceusb 5-1:0.0: Error: mce write urb status = -71
[  554.501162][T13574] veth1_macvtap: left promiscuous mode
[  554.532320][   T45] mceusb 5-1:0.0: Error: mce write urb status = -71
[  554.603662][   T45] mceusb 5-1:0.0: Error: mce write urb status = -71
[  554.648835][   T45] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  554.684251][   T45] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  554.764166][   T45] usb 5-1: USB disconnect, device number 58
[  555.280464][T13591] netlink: 'syz.0.2410': attribute type 13 has an invalid length.
[  555.752599][ T5124] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  555.823152][    T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  555.914509][T12036] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  555.944991][ T5124] usb 2-1: config 0 interface 0 has no altsetting 0
[  555.951662][ T5124] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  555.973551][ T5124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.973655][ T5122] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  555.992352][ T5124] usb 2-1: config 0 descriptor??
[  556.000216][ T5124] smsusb:smsusb_probe: board id=8, interface number 0
[  556.012622][ T5124] smsusb:smsusb_probe: Device initialized with return code -19
[  556.024145][    T9] usb 4-1: Using ep0 maxpacket: 16
[  556.039469][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[  556.061272][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  556.080355][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.089141][    T9] usb 4-1: Product: syz
[  556.093852][    T9] usb 4-1: Manufacturer: syz
[  556.098473][    T9] usb 4-1: SerialNumber: syz
[  556.103283][T12036] usb 3-1: Using ep0 maxpacket: 16
[  556.113971][T12036] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[  556.136495][T13598] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  556.145884][T12036] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  556.155272][T12036] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.164818][    T9] usb 4-1: bad CDC descriptors
[  556.170654][T12036] usb 3-1: Product: syz
[  556.176474][ T5122] usb 5-1: Using ep0 maxpacket: 16
[  556.194598][T12036] usb 3-1: Manufacturer: syz
[  556.199671][ T5122] usb 5-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config
[  556.212266][T12036] usb 3-1: SerialNumber: syz
[  556.220482][ T5122] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  556.235105][T13600] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  556.249355][ T5122] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191
[  556.261088][T12036] usb 3-1: bad CDC descriptors
[  556.272435][ T5122] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  556.314354][ T5122] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  556.326713][ T5122] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  556.344125][ T5122] usb 5-1: Manufacturer: syz
[  556.363005][ T5122] usb 5-1: config 0 descriptor??
[  556.471653][T13596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2412'.
[  556.491229][T13596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2412'.
[  556.589905][ T5124] usb 2-1: USB disconnect, device number 76
[  556.722296][ T5122] rc_core: IR keymap rc-hauppauge not found
[  556.751210][ T5122] Registered IR keymap rc-empty
[  556.759665][ T5122] mceusb 5-1:0.0: Error: mce write urb status = -71
[  556.803602][ T5122] mceusb 5-1:0.0: Error: mce write urb status = -71
[  556.854645][ T5122] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  556.887009][ T5122] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input52
[  556.959537][ T5122] mceusb 5-1:0.0: Error: mce write urb status = -71
[  557.017370][ T5122] mceusb 5-1:0.0: Error: mce write urb status = -71
[  557.054347][ T5122] mceusb 5-1:0.0: Error: mce write urb status = -71
[  557.115922][ T5122] mceusb 5-1:0.0: Error: mce write urb status = -71
[  557.168421][ T5122] mceusb 5-1:0.0: Error: mce write urb status = -71
[  557.218656][ T5122] mceusb 5-1:0.0: Error: mce write urb status = -71
[  557.240708][T13619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2417'.
[  557.293720][ T5122] mceusb 5-1:0.0: Error: mce write urb status = -71
[  557.343130][ T5122] mceusb 5-1:0.0: Error: mce write urb status = -71
[  557.492618][ T5122] mceusb 5-1:0.0: Error: mce write urb status = -71
[  557.596799][T13624] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  557.616612][T13624] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.2418'.
[  558.300484][ T5122] mceusb 5-1:0.0: Error: mce write urb status = -71
[  558.553305][ T5122] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  559.319790][ T5122] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  559.344710][ T5122] usb 5-1: USB disconnect, device number 59
[  559.347916][ T5124] usb 3-1: USB disconnect, device number 57
[  559.568977][T13644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2423'.
[  559.811475][ T5123] usb 4-1: USB disconnect, device number 59
[  560.168733][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2426'.
[  560.653941][T13665] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2429'.
[  560.935994][ T5124] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  561.291762][ T5124] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  561.326204][ T5124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.411329][ T5124] usb 4-1: config 0 descriptor??
[  561.972552][ T5122] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  562.109584][ T5124] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  562.172510][ T5122] usb 2-1: Using ep0 maxpacket: 8
[  562.196357][ T5122] usb 2-1: config 0 has too many interfaces: 38, using maximum allowed: 32
[  562.215334][ T5122] usb 2-1: config 0 has an invalid interface number: 112 but max is 37
[  562.229041][ T5122] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 38
[  562.249785][ T5122] usb 2-1: config 0 has no interface number 0
[  562.272390][T12036] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  562.281711][ T5122] usb 2-1: New USB device found, idVendor=12d1, idProduct=1404, bcdDevice=4b.1a
[  562.305381][ T5122] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  562.318108][ T5122] usb 2-1: SerialNumber: syz
[  562.341658][ T5122] usb 2-1: config 0 descriptor??
[  562.360938][ T5122] option 2-1:0.112: GSM modem (1-port) converter detected
[  562.472510][T12036] usb 3-1: Using ep0 maxpacket: 16
[  562.492611][T12036] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[  562.534535][T12036] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  562.544433][T12036] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.552811][T12036] usb 3-1: Product: syz
[  562.557385][T12036] usb 3-1: Manufacturer: syz
[  562.573127][T12036] usb 3-1: SerialNumber: syz
[  562.593355][T13677] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  562.619996][T12036] usb 3-1: bad CDC descriptors
[  562.931273][ T5124] usb 4-1: USB disconnect, device number 60
[  563.220212][T13684] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2436'.
[  563.376890][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[  563.383395][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  564.660834][T13708] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2442'.
[  565.932017][   T45] usb 2-1: USB disconnect, device number 77
[  565.981296][   T45] option 2-1:0.112: device disconnected
[  566.061675][  T784] usb 3-1: USB disconnect, device number 58
[  566.412339][ T5124] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  567.375420][ T5124] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  567.416671][ T5124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.469939][ T5124] usb 5-1: config 0 descriptor??
[  567.596223][T13756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2456'.
[  567.862440][ T5122] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  567.890765][ T5124] gs_usb 5-1:0.0: Configuring for 1 interfaces
[  568.063157][ T5122] usb 4-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6
[  568.091598][ T5122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.126226][ T5122] usb 4-1: Product: syz
[  568.142972][ T5122] usb 4-1: Manufacturer: syz
[  568.157413][ T5122] usb 4-1: SerialNumber: syz
[  568.181389][ T5122] usb 4-1: config 0 descriptor??
[  568.209199][ T5122] usb 4-1: Found UVC 0.00 device syz (30c9:0093)
[  568.229306][ T5122] usb 4-1: No valid video chain found.
[  568.442886][    T9] usb 4-1: USB disconnect, device number 61
[  568.505281][  T964] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  568.736744][ T5123] usb 5-1: USB disconnect, device number 60
[  569.122526][    T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  569.352426][    T9] usb 3-1: Using ep0 maxpacket: 16
[  569.365696][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[  569.435439][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  569.473378][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.520275][    T9] usb 3-1: Product: syz
[  569.534088][    T9] usb 3-1: Manufacturer: syz
[  569.543211][    T9] usb 3-1: SerialNumber: syz
[  569.596001][T13784] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  569.613862][    T9] usb 3-1: bad CDC descriptors
[  569.732586][ T5123] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  569.932320][ T5123] usb 5-1: Using ep0 maxpacket: 16
[  569.952324][ T5123] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[  570.006222][ T5123] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  570.030510][ T5123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.070112][ T5123] usb 5-1: Product: syz
[  570.084238][ T5123] usb 5-1: Manufacturer: syz
[  570.119054][ T5123] usb 5-1: SerialNumber: syz
[  570.139990][T13810] netlink: 'syz.3.2466': attribute type 13 has an invalid length.
[  570.159754][T13799] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  570.185896][ T5123] usb 5-1: bad CDC descriptors
[  571.863768][    T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  572.102273][    T9] usb 4-1: Using ep0 maxpacket: 16
[  572.131334][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  572.173334][T13854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2473'.
[  572.181673][T13853] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  572.191317][T13853] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  572.200078][T13853] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  572.208802][T13853] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  572.220187][    T9] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  572.233544][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.316060][    T9] usb 4-1: config 0 descriptor??
[  572.508649][ T5122] usb 5-1: USB disconnect, device number 61
[  572.574339][T13843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  572.626215][T13843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  572.953267][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  572.967582][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  573.023399][    T9] usb 4-1: USB disconnect, device number 62
[  573.291985][ T5123] usb 3-1: USB disconnect, device number 59
[  575.123951][T13904] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.2484'.
[  576.592325][ T5122] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  576.772312][   T45] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  577.518552][ T5122] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  577.536147][ T5122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  577.548263][ T5122] usb 4-1: config 0 descriptor??
[  577.768271][   T45] usb 2-1: device descriptor read/64, error -71
[  577.811421][    T9] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x4
[  577.820187][    T9] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x2
[  577.829066][    T9] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x3
[  577.839792][    T9] hid-generic 0000:3000000:0000.0042: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  578.042826][   T45] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  578.294308][   T45] usb 2-1: device descriptor read/64, error -71
[  578.552520][   T45] usb usb2-port1: attempt power cycle
[  578.679210][ T5122] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  578.937836][T13940] QAT: failed to copy from user cfg_data.
[  579.020631][ T5122] usb 4-1: USB disconnect, device number 63
[  579.102278][   T45] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  579.198800][T13947] hub 9-0:1.0: USB hub found
[  579.204660][T13947] hub 9-0:1.0: 8 ports detected
[  579.347126][   T45] usb 2-1: device descriptor read/8, error -71
[  579.802298][   T45] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  580.062372][   T45] usb 2-1: device not accepting address 81, error -71
[  580.080557][   T45] usb usb2-port1: unable to enumerate USB device
[  582.127569][T13975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2503'.
[  582.349327][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2506'.
[  582.452787][ T5125] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  582.662423][ T5125] usb 3-1: Using ep0 maxpacket: 8
[  582.672124][ T5125] usb 3-1: config 0 has too many interfaces: 38, using maximum allowed: 32
[  582.686616][ T5125] usb 3-1: config 0 has an invalid interface number: 112 but max is 37
[  582.697131][ T5125] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 38
[  582.713699][ T5125] usb 3-1: config 0 has no interface number 0
[  582.721628][ T5125] usb 3-1: New USB device found, idVendor=12d1, idProduct=1404, bcdDevice=4b.1a
[  582.757418][ T5125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  582.781529][ T5125] usb 3-1: SerialNumber: syz
[  582.806988][ T5125] usb 3-1: config 0 descriptor??
[  582.817429][ T5125] option 3-1:0.112: GSM modem (1-port) converter detected
[  582.862464][ T5122] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  582.946768][T14007] hub 9-0:1.0: USB hub found
[  582.952547][T14007] hub 9-0:1.0: 8 ports detected
[  583.011090][  T784] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  583.122501][ T5122] usb 2-1: Using ep0 maxpacket: 16
[  583.221072][ T5122] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[  583.322365][  T784] usb 1-1: Using ep0 maxpacket: 16
[  583.418524][  T784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  583.532543][ T5122] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  583.542108][  T784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  583.583607][ T5122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.609359][  T784] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  583.624557][ T5122] usb 2-1: Product: syz
[  583.628795][ T5122] usb 2-1: Manufacturer: syz
[  583.648954][  T784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.664382][ T5122] usb 2-1: SerialNumber: syz
[  583.682698][T13993] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  583.694964][  T784] usb 1-1: config 0 descriptor??
[  583.719494][ T5122] usb 2-1: bad CDC descriptors
[  586.142494][   T45] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  586.434293][T13999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  586.464755][T13999] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  586.484312][   T45] usb 4-1: Using ep0 maxpacket: 16
[  586.515717][   T45] usb 4-1: config 0 has an invalid interface number: 156 but max is 1
[  586.520154][  T784] hid (null): report_id 0 is invalid
[  586.544565][  T784] hid (null): unknown global tag 0xc
[  586.667533][   T45] usb 4-1: config 0 has an invalid interface association descriptor of length 2, skipping
[  586.690938][   T45] usb 4-1: config 0 has no interface number 1
[  586.702351][   T45] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  587.387495][   T45] usb 4-1: string descriptor 0 read error: -71
[  587.454389][  T784] hid-generic 0003:0158:0100.0043: unknown main item tag 0x1
[  587.483607][  T784] hid-generic 0003:0158:0100.0043: unexpected long global item
[  587.491996][  T784] hid-generic 0003:0158:0100.0043: probe with driver hid-generic failed with error -22
[  587.506897][ T5124] usb 3-1: USB disconnect, device number 60
[  587.515469][   T45] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0801, bcdDevice=3b.29
[  587.523289][T12036] usb 2-1: USB disconnect, device number 82
[  587.535717][ T5124] option 3-1:0.112: device disconnected
[  587.561138][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.630626][  T784] usb 1-1: USB disconnect, device number 61
[  587.641256][T14034] netlink: 'syz.4.2516': attribute type 13 has an invalid length.
[  587.705094][   T45] usb 4-1: config 0 descriptor??
[  587.721141][   T45] usb 4-1: can't set config #0, error -71
[  587.752949][   T45] usb 4-1: USB disconnect, device number 64
[  588.306555][T14058] hub 9-0:1.0: USB hub found
[  588.312450][T14058] hub 9-0:1.0: 8 ports detected
[  591.638782][ T5124] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  591.847070][ T5124] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  591.868469][ T5124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.876822][   T45] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  591.888200][ T5124] usb 2-1: config 0 descriptor??
[  592.082422][   T45] usb 5-1: Using ep0 maxpacket: 16
[  592.104410][   T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  592.124213][   T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  592.147809][   T45] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  592.162449][   T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.203966][   T45] usb 5-1: config 0 descriptor??
[  592.304763][ T5124] gs_usb 2-1:0.0: Configuring for 1 interfaces
[  592.362641][ T5125] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  592.582833][ T5125] usb 3-1: Using ep0 maxpacket: 16
[  592.590105][ T5125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  592.601523][ T5125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  592.611699][ T5125] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  592.623007][ T5125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.635444][ T5125] usb 3-1: config 0 descriptor??
[  592.641718][T14080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  592.652027][T12036] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  592.660472][T14080] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  592.672660][   T45] hid (null): report_id 0 is invalid
[  592.684353][   T45] hid-generic 0003:0158:0100.0044: unknown main item tag 0x1
[  592.691972][   T45] hid-generic 0003:0158:0100.0044: unexpected long global item
[  592.703989][   T45] hid-generic 0003:0158:0100.0044: probe with driver hid-generic failed with error -22
[  592.842482][T12036] usb 1-1: Using ep0 maxpacket: 16
[  592.856454][T12036] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  592.888318][T12036] usb 1-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=57.47
[  592.899180][T12036] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.919811][T12036] usb 1-1: Product: syz
[  592.927742][ T5123] usb 5-1: USB disconnect, device number 62
[  592.939297][  T784] usb 2-1: USB disconnect, device number 83
[  592.954587][T12036] usb 1-1: Manufacturer: syz
[  592.964775][T12036] usb 1-1: SerialNumber: syz
[  593.161879][T12036] usb 1-1: config 0 descriptor??
[  593.182323][T14094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  593.203828][T14094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  593.408993][T12036] usb 1-1: Found UVC 0.00 device syz (046d:0821)
[  593.573662][T12036] usb 1-1: No valid video chain found.
[  594.018876][ T5125] hid (null): unknown global tag 0xd
[  594.024307][T12036] usb 1-1: USB disconnect, device number 62
[  594.069651][ T5125] hid (null): unknown global tag 0xe
[  594.075510][ T5125] hid (null): report_id 908678640 is invalid
[  594.082548][ T5125] hid (null): report_id 12511 is invalid
[  594.117627][ T5125] hid-generic 0003:0158:0100.0045: unknown main item tag 0x1
[  594.152592][ T5125] hid-generic 0003:0158:0100.0045: unexpected long global item
[  594.187284][ T5125] hid-generic 0003:0158:0100.0045: probe with driver hid-generic failed with error -22
[  594.231274][ T5125] usb 3-1: USB disconnect, device number 61
[  594.319663][T14110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2540'.
[  594.514674][ T5126] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  594.756020][ T5126] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  594.782810][ T5126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  594.958639][ T5126] usb 4-1: config 0 descriptor??
[  595.153193][ T5075] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  595.192752][ T5075] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  595.204736][ T5075] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  595.214703][ T5075] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  595.222662][ T5075] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  595.231059][ T5075] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  595.479172][ T5126] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  595.707928][ T5089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  595.719270][ T5089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  595.728435][ T5089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  595.753679][ T5089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  595.766639][ T5089] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  595.784551][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  595.817570][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.686109][ T5075] Bluetooth: hci5: command tx timeout
[  598.004970][ T5075] Bluetooth: hci1: command tx timeout
[  598.050695][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  598.155572][T12036] usb 4-1: USB disconnect, device number 65
[  598.523844][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.516013][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.772448][ T5075] Bluetooth: hci5: command tx timeout
[  599.894202][   T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  600.012356][ T5075] Bluetooth: hci1: command tx timeout
[  600.146381][T14140] chnl_net:caif_netlink_parms(): no params data found
[  600.168177][T14191] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  600.281929][   T11] bridge_slave_1: left allmulticast mode
[  600.306627][   T11] bridge_slave_1: left promiscuous mode
[  600.327350][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  600.359427][   T11] bridge_slave_0: left allmulticast mode
[  600.382622][   T11] bridge_slave_0: left promiscuous mode
[  600.388450][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  601.254337][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  601.279369][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  601.304994][   T11] bond0 (unregistering): Released all slaves
[  601.321998][T14190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2556'.
[  601.529243][   T11] IPVS: stopping master sync thread 13523 ...
[  601.562312][ T5125] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  601.740106][T14140] bridge0: port 1(bridge_slave_0) entered blocking state
[  601.765067][T14140] bridge0: port 1(bridge_slave_0) entered disabled state
[  601.779907][ T5125] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  601.791698][T14140] bridge_slave_0: entered allmulticast mode
[  601.800177][ T5125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.823934][T14140] bridge_slave_0: entered promiscuous mode
[  601.844932][T14149] chnl_net:caif_netlink_parms(): no params data found
[  601.852612][ T5075] Bluetooth: hci5: command tx timeout
[  601.853304][ T5125] usb 1-1: config 0 descriptor??
[  601.948137][T14140] bridge0: port 2(bridge_slave_1) entered blocking state
[  602.011278][T14140] bridge0: port 2(bridge_slave_1) entered disabled state
[  602.046884][T14140] bridge_slave_1: entered allmulticast mode
[  602.074950][T14140] bridge_slave_1: entered promiscuous mode
[  602.093392][ T5075] Bluetooth: hci1: command tx timeout
[  602.376394][ T5125] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  602.477273][T14140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  602.596979][   T11] hsr_slave_0: left promiscuous mode
[  602.614495][   T11] hsr_slave_1: left promiscuous mode
[  602.623734][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  602.631230][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  602.668687][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  602.690436][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  602.751803][   T11] veth1_macvtap: left promiscuous mode
[  602.772604][   T11] veth0_macvtap: left promiscuous mode
[  602.782840][   T11] veth1_vlan: left promiscuous mode
[  602.788212][   T11] veth0_vlan: left promiscuous mode
[  603.559392][   T11] team0 (unregistering): Port device team_slave_1 removed
[  603.631060][   T11] team0 (unregistering): Port device team_slave_0 removed
[  603.932493][ T5075] Bluetooth: hci5: command tx timeout
[  604.172539][ T5075] Bluetooth: hci1: command tx timeout
[  604.228456][T14140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  604.391374][ T5123] usb 1-1: USB disconnect, device number 63
[  604.581360][T14254] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  604.601355][T14257] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2568'.
[  604.611335][T14254] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  604.651003][T14140] team0: Port device team_slave_0 added
[  604.687349][T14252] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2568'.
[  604.698479][T14149] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.743075][T14149] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.750337][T14149] bridge_slave_0: entered allmulticast mode
[  604.792783][T14149] bridge_slave_0: entered promiscuous mode
[  604.807909][T14257] IPv6: Can't replace route, no match found
[  604.867764][T14140] team0: Port device team_slave_1 added
[  604.914299][T14149] bridge0: port 2(bridge_slave_1) entered blocking state
[  604.928634][T14149] bridge0: port 2(bridge_slave_1) entered disabled state
[  604.959330][T14149] bridge_slave_1: entered allmulticast mode
[  604.997577][T14149] bridge_slave_1: entered promiscuous mode
[  605.188774][T14140] batman_adv: batadv0: Adding interface: batadv_slave_0
[  605.332329][T14140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  605.361469][T14140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  605.451551][T14149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  605.529926][T14149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  605.680076][T14140] batman_adv: batadv0: Adding interface: batadv_slave_1
[  605.712767][T14140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  605.743322][T14140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  605.856320][T14149] team0: Port device team_slave_0 added
[  605.903222][T14149] team0: Port device team_slave_1 added
[  606.054496][T14288] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  606.138175][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  606.174121][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.251550][T14140] hsr_slave_0: entered promiscuous mode
[  606.309619][T14140] hsr_slave_1: entered promiscuous mode
[  606.452463][ T5122] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  606.494578][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  606.510912][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.626249][T14149] batman_adv: batadv0: Adding interface: batadv_slave_0
[  606.638106][T14149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  606.679931][ T5122] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  606.705129][ T5122] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.705142][T14149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  606.713220][T14149] batman_adv: batadv0: Adding interface: batadv_slave_1
[  606.713239][T14149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  606.713263][T14149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  606.815067][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  606.828704][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.831645][ T5122] usb 2-1: config 0 descriptor??
[  607.001859][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  607.033984][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.135001][T14149] hsr_slave_0: entered promiscuous mode
[  607.147590][T14149] hsr_slave_1: entered promiscuous mode
[  607.184580][T14149] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  607.207489][T14149] Cannot create hsr debugfs directory
[  607.238818][ T5075] Bluetooth: unknown link type 48
[  607.244050][ T5075] Bluetooth: hci0: connection err: -111
[  607.268527][ T5122] gs_usb 2-1:0.0: Configuring for 1 interfaces
[  607.297713][ T5075] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  608.085948][ T5122] usb 2-1: USB disconnect, device number 84
[  608.200941][   T11] bridge_slave_1: left allmulticast mode
[  608.213250][   T11] bridge_slave_1: left promiscuous mode
[  608.219041][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  608.274802][   T11] bridge_slave_0: left allmulticast mode
[  608.284107][   T11] bridge_slave_0: left promiscuous mode
[  608.291277][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  608.429745][T14329] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  608.973575][   T11] team0: Port device geneve1 removed
[  608.992138][T14346] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  609.379592][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  609.400021][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  609.438371][   T11] bond0 (unregistering): (slave team0): Releasing backup interface
[  609.467822][   T11] bond0 (unregistering): Released all slaves
[  609.723592][   T11] IPVS: stopping master sync thread 8259 ...
[  610.277285][   T11] hsr_slave_0: left promiscuous mode
[  610.317243][   T11] hsr_slave_1: left promiscuous mode
[  610.339866][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  610.357436][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  610.428869][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  610.453938][  T784] libceph: connect (1)[c::]:6789 error -101
[  610.479495][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  610.500253][  T784] libceph: mon0 (1)[c::]:6789 connect error
[  610.540421][  T784] libceph: connect (1)[c::]:6789 error -101
[  610.570724][  T784] libceph: mon0 (1)[c::]:6789 connect error
[  610.572974][   T11] veth1_macvtap: left promiscuous mode
[  610.582665][   T11] veth0_macvtap: left promiscuous mode
[  610.589812][   T11] veth1_vlan: left promiscuous mode
[  610.602278][   T11] veth0_vlan: left promiscuous mode
[  610.873764][T12036] libceph: connect (1)[c::]:6789 error -101
[  610.889367][T12036] libceph: mon0 (1)[c::]:6789 connect error
[  611.146486][T14364] ceph: No mds server is up or the cluster is laggy
[  611.374219][T14385] 9pnet_fd: Insufficient options for proto=fd
[  611.429941][   T11] pim6reg (unregistering): left allmulticast mode
[  611.894532][T14393] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2593'.
[  612.512602][T14391] 9pnet_fd: Insufficient options for proto=fd
[  612.756697][   T11] team0 (unregistering): Port device virt_wifi0 removed
[  612.934214][T12036] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  612.985397][   T11] team0 (unregistering): Port device team_slave_1 removed
[  613.027003][   T11] team0 (unregistering): Port device team_slave_0 removed
[  613.112295][ T5125] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  613.130582][T12036] usb 4-1: Using ep0 maxpacket: 16
[  613.137872][T12036] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  613.149402][T12036] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  613.159516][T12036] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  613.168685][T12036] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  613.183151][T12036] usb 4-1: config 0 descriptor??
[  613.293743][ T5125] usb 1-1: Using ep0 maxpacket: 16
[  613.301649][ T5125] usb 1-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config
[  613.313704][ T5125] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  613.330598][ T5125] usb 1-1: New USB device found, idVendor=1b80, idProduct=c161, bcdDevice=ce.43
[  613.339782][ T5125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.347899][ T5125] usb 1-1: Product: syz
[  613.352095][ T5125] usb 1-1: Manufacturer: syz
[  613.356806][ T5125] usb 1-1: SerialNumber: syz
[  613.369385][ T5125] usb 1-1: config 0 descriptor??
[  613.669283][T14398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  613.685567][T14398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  613.705936][ T5125] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  613.715858][ T5125] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  613.742767][T12036] hid (null): report_id 0 is invalid
[  613.761136][ T5125] usb 1-1: USB disconnect, device number 64
[  613.768803][T12036] hid (null): unknown global tag 0xd
[  613.806787][T12036] hid (null): unknown global tag 0xe
[  613.829070][T12036] hid (null): report_id 908678640 is invalid
[  613.870794][T12036] hid (null): report_id 12511 is invalid
[  613.909192][T12036] hid-generic 0003:0158:0100.0046: unknown main item tag 0x1
[  613.946953][T12036] hid-generic 0003:0158:0100.0046: unexpected long global item
[  613.974437][T12036] hid-generic 0003:0158:0100.0046: probe with driver hid-generic failed with error -22
[  614.007326][T12036] usb 4-1: USB disconnect, device number 66
[  614.035345][T14140] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  614.079802][T14140] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  614.127145][T14140] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  614.154864][T14140] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  614.609699][T14422] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  614.678082][ T5075] Bluetooth: unknown link type 48
[  614.684903][ T5075] Bluetooth: hci0: connection err: -111
[  614.713431][T14140] 8021q: adding VLAN 0 to HW filter on device bond0
[  614.756316][ T5075] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  614.863983][T14140] 8021q: adding VLAN 0 to HW filter on device team0
[  615.046917][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state
[  615.054146][ T5093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  615.201232][  T784] bridge0: port 2(bridge_slave_1) entered blocking state
[  615.208365][  T784] bridge0: port 2(bridge_slave_1) entered forwarding state
[  615.321674][T14149] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  615.371216][T14149] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  615.421122][T14149] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  615.459882][T14149] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  615.841135][T14149] 8021q: adding VLAN 0 to HW filter on device bond0
[  615.970814][T14149] 8021q: adding VLAN 0 to HW filter on device team0
[  616.055474][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state
[  616.062800][ T5122] bridge0: port 1(bridge_slave_0) entered forwarding state
[  616.103709][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state
[  616.110931][ T5122] bridge0: port 2(bridge_slave_1) entered forwarding state
[  616.229889][T14140] 8021q: adding VLAN 0 to HW filter on device batadv0
[  616.342335][ T5125] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  616.552353][ T5125] usb 1-1: Using ep0 maxpacket: 16
[  616.578907][ T5125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  616.613448][ T5125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  616.643048][ T5125] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  616.670245][ T5125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.693802][ T5125] usb 1-1: config 0 descriptor??
[  616.778301][T14149] 8021q: adding VLAN 0 to HW filter on device batadv0
[  616.937024][T14149] veth0_vlan: entered promiscuous mode
[  616.943740][ T5220] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  617.023472][T14140] veth0_vlan: entered promiscuous mode
[  617.050248][T14140] veth1_vlan: entered promiscuous mode
[  617.114769][T14149] veth1_vlan: entered promiscuous mode
[  617.182329][ T5220] usb 4-1: Using ep0 maxpacket: 16
[  617.271837][ T5220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  617.294484][ T5220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  617.313251][ T5220] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  617.323623][ T5220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.353605][ T5220] usb 4-1: config 0 descriptor??
[  617.360968][T14149] veth0_macvtap: entered promiscuous mode
[  617.395446][T14149] veth1_macvtap: entered promiscuous mode
[  617.444312][T14140] veth0_macvtap: entered promiscuous mode
[  617.465589][T14454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  617.495167][T14454] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  617.507737][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  617.541648][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  617.552661][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  617.564529][ T5125] hid (null): unknown global tag 0xd
[  617.569920][ T5125] hid (null): unknown global tag 0xe
[  617.591160][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  617.601907][ T5125] hid (null): report_id 908678640 is invalid
[  617.608572][ T5125] hid (null): report_id 12511 is invalid
[  617.615464][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  617.631232][ T5125] hid-generic 0003:0158:0100.0047: unknown main item tag 0x1
[  617.641459][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  617.651639][ T5125] hid-generic 0003:0158:0100.0047: unexpected long global item
[  617.664205][ T5125] hid-generic 0003:0158:0100.0047: probe with driver hid-generic failed with error -22
[  617.671984][T14149] batman_adv: batadv0: Interface activated: batadv_slave_0
[  617.706638][T14140] veth1_macvtap: entered promiscuous mode
[  617.729219][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  617.739984][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  617.750944][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  617.763318][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  617.773978][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  617.785392][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  617.797984][T14149] batman_adv: batadv0: Interface activated: batadv_slave_1
[  617.829298][T14149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  617.846421][T14149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  617.860893][T14149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  617.875161][T14149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  617.888901][  T784] usb 1-1: USB disconnect, device number 65
[  617.919812][T14474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  617.961174][T14474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  617.964591][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  617.986359][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  617.998438][ T5220] hid (null): report_id 0 is invalid
[  618.003918][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  618.025134][ T5220] hid (null): unknown global tag 0xd
[  618.036649][ T5220] hid (null): unknown global tag 0xe
[  618.042001][ T5220] hid (null): report_id 908678640 is invalid
[  618.052194][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  618.068660][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  618.079479][ T5220] hid (null): report_id 12511 is invalid
[  618.085697][ T5220] hid (null): unknown global tag 0xd
[  618.101459][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  618.116931][ T5220] hid-generic 0003:0158:0100.0048: unknown main item tag 0x1
[  618.129668][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  618.142343][ T5220] hid-generic 0003:0158:0100.0048: unexpected long global item
[  618.152086][ T5220] hid-generic 0003:0158:0100.0048: probe with driver hid-generic failed with error -22
[  618.164260][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  618.191394][T14140] batman_adv: batadv0: Interface activated: batadv_slave_0
[  618.221467][  T784] usb 4-1: USB disconnect, device number 67
[  618.221927][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  618.279225][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  618.295614][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  618.307503][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  618.323736][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  618.335638][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  618.356002][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  618.367209][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  618.382452][T14140] batman_adv: batadv0: Interface activated: batadv_slave_1
[  618.420714][T14140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  618.451095][T14140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  618.485049][T14140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  618.507260][T14140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  618.640204][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  618.664638][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  618.729830][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  618.757715][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  618.815485][  T964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  618.844703][  T964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  618.876831][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  618.930179][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  620.072287][  T784] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  620.128195][ T5125] IPVS: starting estimator thread 0...
[  620.162455][ T5220] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  620.190226][T14537] IPVS: rr: SCTP 127.0.0.1:0 - no destination available
[  620.242974][T14538] IPVS: using max 20 ests per chain, 48000 per kthread
[  620.266031][T14537] PKCS7: Unknown OID: [5] (bad)
[  620.271487][T14537] PKCS7: Only support pkcs7_signedData type
[  620.301775][  T784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  620.350466][  T784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  620.362816][ T5220] usb 4-1: Using ep0 maxpacket: 32
[  620.376928][  T784] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  620.385622][ T5220] usb 4-1: config 0 has an invalid interface number: 14 but max is 1
[  620.415597][ T5220] usb 4-1: config 0 has no interface number 1
[  620.443304][ T5220] usb 4-1: New USB device found, idVendor=046d, idProduct=0928, bcdDevice=26.52
[  620.453989][  T784] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[  620.465301][ T5220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.474588][  T784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  620.482228][ T5220] usb 4-1: Product: syz
[  620.489720][ T5220] usb 4-1: Manufacturer: syz
[  620.511186][ T5220] usb 4-1: SerialNumber: syz
[  620.524544][  T784] usb 1-1: config 0 descriptor??
[  620.539715][ T5220] usb 4-1: config 0 descriptor??
[  620.576851][ T5220] gspca_main: spca561-2.14.0 probing 046d:0928
[  620.622345][ T5125] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  620.769435][ T5220] spca561 4-1:0.0: probe with driver spca561 failed with error -22
[  620.807856][ T5220] usb 4-1: USB disconnect, device number 68
[  620.816013][ T5125] usb 5-1: Using ep0 maxpacket: 16
[  620.872910][ T5125] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  620.912805][ T5125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  620.931385][ T5125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  620.949258][ T5125] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  620.964367][  T784] chicony 0003:04F2:1421.0049: item fetching failed at offset 0/4
[  620.972219][ T5125] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  620.989975][ T5125] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  620.994814][  T784] chicony 0003:04F2:1421.0049: Chicony hid parse failed: -22
[  621.017192][  T784] chicony 0003:04F2:1421.0049: probe with driver chicony failed with error -22
[  621.037224][ T5125] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  621.075012][ T5125] usb 5-1: Manufacturer: syz
[  621.113363][ T5125] usb 5-1: config 0 descriptor??
[  621.165143][T12036] usb 1-1: USB disconnect, device number 66
[  621.452026][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2619'.
[  621.476378][T14576] netlink: 'syz.3.2619': attribute type 1 has an invalid length.
[  621.492901][T14576] netlink: 191384 bytes leftover after parsing attributes in process `syz.3.2619'.
[  621.512751][ T5125] rc_core: IR keymap rc-hauppauge not found
[  621.519624][ T5125] Registered IR keymap rc-empty
[  621.533430][ T5125] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  621.582939][ T5125] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  621.623192][ T5125] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  621.652541][ T5125] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input53
[  621.672478][ T5220] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  621.715552][ T5125] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  621.786130][ T5125] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  621.962607][T14591] hub 9-0:1.0: USB hub found
[  621.968510][T14591] hub 9-0:1.0: 8 ports detected
[  622.068703][T12036] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  622.372648][T12036] usb 3-1: Using ep0 maxpacket: 16
[  622.582668][T12036] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  622.632423][T12036] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  622.686552][ T5125] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  622.692909][T12036] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  622.713182][ T5220] usb 2-1: Using ep0 maxpacket: 16
[  622.723086][T12036] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.739440][ T5125] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  622.751760][ T5220] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  622.768321][ T5220] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  622.779261][ T5220] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  622.787881][T12036] usb 3-1: config 0 descriptor??
[  622.789442][ T5220] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  622.810478][ T5125] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  622.842722][ T5220] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  622.861502][ T5220] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  622.877138][ T5125] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  622.895617][ T5220] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  622.913261][ T5125] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  622.922346][ T5220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.951064][ T5220] usb 2-1: Product: syz
[  622.971974][ T5220] usb 2-1: Manufacturer: syz
[  622.977424][ T5125] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  622.992285][ T5220] usb 2-1: SerialNumber: syz
[  623.023861][ T5125] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  623.093064][ T5125] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  623.145080][ T5125] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  623.180303][ T5125] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  623.229516][ T5125] usb 5-1: USB disconnect, device number 63
[  623.354685][T14580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  623.382638][T14580] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  623.426997][T12036] hid (null): report_id 0 is invalid
[  623.592661][ T5122] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  623.608708][T12036] hid (null): unknown global tag 0xd
[  623.646907][T12036] hid (null): unknown global tag 0xe
[  623.657070][T12036] hid (null): report_id 908678640 is invalid
[  623.682634][T12036] hid (null): report_id 12511 is invalid
[  623.695313][T12036] hid (null): unknown global tag 0xd
[  623.720050][T12036] hid-generic 0003:0158:0100.004A: unknown main item tag 0x1
[  623.750174][T12036] hid-generic 0003:0158:0100.004A: unexpected long global item
[  623.783789][T12036] hid-generic 0003:0158:0100.004A: probe with driver hid-generic failed with error -22
[  623.798722][T12036] usb 3-1: USB disconnect, device number 62
[  623.812431][ T5122] usb 4-1: Using ep0 maxpacket: 16
[  623.823984][ T5122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  624.000290][ T5122] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  624.022898][ T5122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.058115][ T5122] usb 4-1: config 0 descriptor??
[  624.382473][T14613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  624.421134][T14613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  624.627194][T14613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  624.703660][T14613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  624.815992][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[  624.823877][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  624.970342][ T5122] usbhid 4-1:0.0: can't add hid device: -71
[  624.988872][ T5122] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  625.008460][ T5122] usb 4-1: USB disconnect, device number 69
[  625.572980][ T5220] cdc_ncm 2-1:1.0: bind() failure
[  625.583510][ T5220] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  625.590360][ T5220] cdc_ncm 2-1:1.1: bind() failure
[  625.623072][ T5220] usb 2-1: USB disconnect, device number 85
[  625.665602][ T5125] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  625.892768][ T5125] usb 1-1: Using ep0 maxpacket: 16
[  625.926986][ T5125] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  625.938495][ T5125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  625.949624][ T5125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  625.959827][ T5125] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  625.969642][ T5125] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  625.993597][ T5125] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  626.012822][ T5125] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  626.029480][ T5125] usb 1-1: Manufacturer: syz
[  626.040915][ T5125] usb 1-1: config 0 descriptor??
[  626.082355][ T5122] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  626.152317][ T5220] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  626.277107][ T5122] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  626.296541][ T5122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.329576][ T5122] usb 4-1: config 0 descriptor??
[  626.343005][ T5220] usb 2-1: Using ep0 maxpacket: 16
[  626.352427][ T5125] rc_core: IR keymap rc-hauppauge not found
[  626.363066][ T5125] Registered IR keymap rc-empty
[  626.368236][ T5125] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  626.395045][ T5220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  626.418279][ T5220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  626.434459][ T5125] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  626.449540][ T5220] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  626.474884][ T5220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.484027][ T5125] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  626.499132][ T5220] usb 2-1: config 0 descriptor??
[  626.530083][ T5125] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input54
[  626.571693][ T5125] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  626.612600][ T5125] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  626.647111][T14675] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2646'.
[  626.650374][ T5125] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  626.673173][T14675] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.682247][T14675] bridge0: port 1(bridge_slave_0) entered disabled state
[  626.692959][T14675] bridge0: entered promiscuous mode
[  626.752522][ T5125] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  626.765933][ T5122] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  626.805561][ T5125] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  626.872526][ T5125] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  626.912467][ T5125] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  626.953040][ T5125] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  626.995683][ T5125] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  627.042383][ T5125] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  627.062602][T14657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  627.071736][T14657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  627.087221][ T5220] hid (null): report_id 0 is invalid
[  627.093608][ T5125] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  627.105124][ T5220] hid (null): unknown global tag 0xd
[  627.113378][ T5220] hid (null): unknown global tag 0xe
[  627.118905][ T5125] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  627.128329][ T5220] hid (null): report_id 908678640 is invalid
[  627.162343][ T5093] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  627.168391][ T5125] usb 1-1: USB disconnect, device number 67
[  627.176060][ T5220] hid (null): report_id 12511 is invalid
[  627.182391][ T5220] hid (null): unknown global tag 0xd
[  627.194712][ T5220] hid-generic 0003:0158:0100.004B: unknown main item tag 0x1
[  627.203662][ T5220] hid-generic 0003:0158:0100.004B: unexpected long global item
[  627.218826][ T5220] hid-generic 0003:0158:0100.004B: probe with driver hid-generic failed with error -22
[  627.315975][ T5122] usb 2-1: USB disconnect, device number 86
[  627.362938][ T5093] usb 3-1: Using ep0 maxpacket: 16
[  627.370824][ T5093] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  627.395733][ T5093] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  627.399711][ T5220] usb 4-1: USB disconnect, device number 70
[  627.411224][ T5093] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  627.421669][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.474521][ T5093] usb 3-1: config 0 descriptor??
[  627.986723][T14693] program syz.4.2650 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  628.010648][T14680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  628.033912][T14680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  628.059698][ T5093] hid (null): report_id 0 is invalid
[  628.080483][ T5093] hid (null): unknown global tag 0xd
[  628.106213][ T5093] hid (null): unknown global tag 0xe
[  628.124474][T14707] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  628.134089][ T5093] hid (null): report_id 908678640 is invalid
[  628.140170][ T5093] hid (null): report_id 12511 is invalid
[  628.173368][ T5093] hid-generic 0003:0158:0100.004C: unknown main item tag 0x1
[  628.214965][ T5093] hid-generic 0003:0158:0100.004C: unexpected long global item
[  628.246401][ T5093] hid-generic 0003:0158:0100.004C: probe with driver hid-generic failed with error -22
[  628.264057][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2656'.
[  628.308011][ T5093] usb 3-1: USB disconnect, device number 63
[  628.314940][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2656'.
[  628.332577][ T5220] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  628.562620][ T5220] usb 5-1: Using ep0 maxpacket: 16
[  628.620619][ T5220] usb 5-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice= 8.e8
[  628.650679][ T5220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.650808][ T5122] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  628.685466][ T5220] usb 5-1: Product: syz
[  628.689704][ T5220] usb 5-1: Manufacturer: syz
[  628.695754][ T5220] usb 5-1: SerialNumber: syz
[  628.703728][ T5220] usb 5-1: config 0 descriptor??
[  628.924351][ T5122] usb 2-1: Using ep0 maxpacket: 16
[  628.945640][ T5122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  628.964723][   T29] audit: type=1326 audit(1719955274.722:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14735 comm="syz.2.2661" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f478d375f19 code=0x0
[  628.980139][ T5122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  629.054404][ T5122] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  629.078139][ T5122] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  629.219366][ T5220] usb 5-1: USB disconnect, device number 64
[  629.253135][ T5122] usb 2-1: config 0 descriptor??
[  630.852890][ T5089] Bluetooth: hci0: command tx timeout
[  630.881653][T14720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  631.051679][T14720] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  631.483421][ T5122] hid (null): unknown global tag 0xd
[  631.488790][ T5122] hid (null): unknown global tag 0xe
[  631.518919][ T5122] hid (null): report_id 908678640 is invalid
[  631.526080][ T5122] hid (null): report_id 12511 is invalid
[  631.544792][ T5122] hid-generic 0003:0158:0100.004D: unknown main item tag 0x1
[  631.569758][ T5122] hid-generic 0003:0158:0100.004D: unexpected long global item
[  631.598140][ T5122] hid-generic 0003:0158:0100.004D: probe with driver hid-generic failed with error -22
[  631.907316][ T5123] usb 2-1: USB disconnect, device number 87
[  631.964552][ T5122] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  632.172518][ T5122] usb 3-1: Using ep0 maxpacket: 16
[  632.198542][ T5122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  632.240256][ T5122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  632.270406][ T5122] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  632.293355][ T5122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  632.314643][ T5122] usb 3-1: config 0 descriptor??
[  632.436865][   T29] audit: type=1326 audit(1719955278.192:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14792 comm="syz.4.2674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4022375f19 code=0x0
[  632.458109][    C1] vkms_vblank_simulate: vblank timer overrun
[  633.002378][ T5089] Bluetooth: hci0: command tx timeout
[  635.252913][T14811] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20002
[  636.072903][T14769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  636.222847][T14769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  636.322027][ T5122] hid (null): report_id 0 is invalid
[  636.346001][ T5122] hid (null): unknown global tag 0xc
[  636.364782][ T5122] hid-generic 0003:0158:0100.004E: unknown main item tag 0x1
[  636.377964][ T5122] hid-generic 0003:0158:0100.004E: unexpected long global item
[  636.492388][ T5075] Bluetooth: hci0: command tx timeout
[  636.512931][ T5122] hid-generic 0003:0158:0100.004E: probe with driver hid-generic failed with error -22
[  636.789727][ T5122] usb 3-1: USB disconnect, device number 64
[  637.372305][ T5123] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  638.503806][ T5123] usb 4-1: Using ep0 maxpacket: 16
[  638.630111][ T5075] Bluetooth: hci0: command tx timeout
[  639.243889][ T5123] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[  639.277460][ T5123] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  639.292760][ T5123] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.315882][ T5123] usb 4-1: Product: syz
[  639.327407][ T5123] usb 4-1: Manufacturer: syz
[  639.338634][ T5123] usb 4-1: SerialNumber: syz
[  639.352871][T14844] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  639.367315][ T5123] usb 4-1: bad CDC descriptors
[  639.404450][T14859] vivid-000: disconnect
[  639.413653][T14856] vivid-000: reconnect
[  642.173802][T12036] usb 4-1: USB disconnect, device number 71
[  642.337081][T14890] vivid-000: disconnect
[  642.342530][T14869] Bluetooth: hci2: command 0x0406 tx timeout
[  642.348849][T14869] Bluetooth: hci0: command 0x0406 tx timeout
[  642.378026][T14889] vivid-000: reconnect
[  642.456922][T14892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2703'.
[  642.599366][ T5093] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  642.962863][ T5093] usb 2-1: unable to get BOS descriptor or descriptor too short
[  643.220844][ T5093] usb 2-1: unable to read config index 0 descriptor/start: -71
[  643.250380][ T5093] usb 2-1: can't read configurations, error -71
[  643.419566][T14897] syz.0.2706 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  645.996578][T14938] vivid-002: disconnect
[  646.075724][T14932] vivid-002: reconnect
[  646.826272][ T5123] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  647.564010][ T5123] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  647.604746][ T5123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.653922][ T5123] usb 2-1: config 0 descriptor??
[  647.979393][T14978] netlink: 'syz.3.2729': attribute type 13 has an invalid length.
[  648.104085][ T5123] gs_usb 2-1:0.0: Configuring for 1 interfaces
[  649.000487][ T5125] usb 2-1: USB disconnect, device number 90
[  651.700966][T12036] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  651.852336][ T5122] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  651.916888][T12036] usb 2-1: Using ep0 maxpacket: 16
[  651.927061][T12036] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  651.954184][T12036] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  651.967190][T12036] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  651.992234][T12036] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.021560][T12036] usb 2-1: config 0 descriptor??
[  652.033299][ T5125] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  652.053309][ T5122] usb 4-1: Using ep0 maxpacket: 16
[  652.060891][ T5122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  652.082235][ T5122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  652.112424][ T5122] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  652.121545][ T5122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.161165][ T5122] usb 4-1: config 0 descriptor??
[  652.239054][ T5125] usb 1-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6
[  652.280082][ T5125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.311510][ T5125] usb 1-1: Product: syz
[  652.321529][ T5125] usb 1-1: Manufacturer: syz
[  652.359699][ T5125] usb 1-1: SerialNumber: syz
[  652.431194][ T5125] usb 1-1: config 0 descriptor??
[  652.458036][ T5125] usb 1-1: Found UVC 0.00 device syz (30c9:0093)
[  652.500035][ T5125] usb 1-1: No valid video chain found.
[  652.647656][T15044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2740'.
[  652.714261][T15046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  652.725217][ T5125] usb 1-1: USB disconnect, device number 68
[  652.780874][T15046] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  652.967367][ T5122] hid (null): report_id 0 is invalid
[  653.065437][ T5122] hid (null): unknown global tag 0xd
[  653.070869][ T5122] hid (null): unknown global tag 0xe
[  653.112205][ T5122] hid (null): report_id 908678640 is invalid
[  653.123117][T15015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  653.133610][T15015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  653.137887][ T5122] hid (null): report_id 12511 is invalid
[  653.169359][ T5122] hid-generic 0003:0158:0100.004F: unknown main item tag 0x1
[  653.184767][T12036] hid (null): unknown global tag 0xd
[  653.190155][T12036] hid (null): unknown global tag 0xe
[  653.208988][ T5122] hid-generic 0003:0158:0100.004F: unexpected long global item
[  653.244738][T12036] hid (null): report_id 908678640 is invalid
[  653.250927][T12036] hid (null): report_id 12511 is invalid
[  653.262616][ T5122] hid-generic 0003:0158:0100.004F: probe with driver hid-generic failed with error -22
[  653.290131][T12036] hid-generic 0003:0158:0100.0050: unknown main item tag 0x1
[  653.302105][ T5122] usb 4-1: USB disconnect, device number 72
[  653.313802][T12036] hid-generic 0003:0158:0100.0050: unexpected long global item
[  653.349109][T12036] hid-generic 0003:0158:0100.0050: probe with driver hid-generic failed with error -22
[  653.486833][ T5125] usb 2-1: USB disconnect, device number 91
[  653.581714][T15066] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  653.590845][T15066] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  653.599279][T15066] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  654.837272][T15080] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2750'.
[  654.882898][T15080] openvswitch: netlink: Multiple metadata blocks provided
[  655.017452][T15081] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2749'.
[  655.032624][T15081] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2749'.
[  655.309361][T15098] vxcan1: tx address claim with different name
[  655.342348][ T5125] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  655.536493][ T5125] usb 2-1: Using ep0 maxpacket: 16
[  655.546567][ T5125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  655.566739][ T5125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  655.592243][ T5125] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  655.609414][ T5125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.624567][ T5125] usb 2-1: config 0 descriptor??
[  656.082525][T12036] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  656.269066][T15092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  656.307104][T15092] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  656.332837][T12036] usb 1-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6
[  656.342049][T12036] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.358912][T12036] usb 1-1: Product: syz
[  656.360021][ T5125] hid (null): unknown global tag 0xd
[  656.367271][T12036] usb 1-1: Manufacturer: syz
[  656.381066][T12036] usb 1-1: SerialNumber: syz
[  656.391037][ T5125] hid (null): unknown global tag 0xe
[  656.402011][T12036] usb 1-1: config 0 descriptor??
[  656.415012][ T5125] hid (null): report_id 908678640 is invalid
[  656.417145][T12036] usb 1-1: Found UVC 0.00 device syz (30c9:0093)
[  656.431325][ T5125] hid (null): report_id 12511 is invalid
[  656.437578][T12036] usb 1-1: No valid video chain found.
[  656.474983][ T5125] hid-generic 0003:0158:0100.0051: unknown main item tag 0x1
[  656.491486][ T5125] hid-generic 0003:0158:0100.0051: unexpected long global item
[  656.506394][ T5125] hid-generic 0003:0158:0100.0051: probe with driver hid-generic failed with error -22
[  656.665620][ T5125] usb 1-1: USB disconnect, device number 69
[  656.775636][T12036] usb 2-1: USB disconnect, device number 92
[  657.126275][ T5220] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  657.322436][ T5220] usb 4-1: Using ep0 maxpacket: 16
[  657.393850][ T5220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  657.580028][ T5220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  657.767760][ T5220] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  657.851498][ T5220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  657.942624][ T5220] usb 4-1: config 0 descriptor??
[  658.237145][T15133] netlink: 'syz.1.2766': attribute type 1 has an invalid length.
[  658.248726][T15133] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.2766'.
[  658.269399][T15133] netlink: 'syz.1.2766': attribute type 1 has an invalid length.
[  658.280543][T15133] netlink: 'syz.1.2766': attribute type 2 has an invalid length.
[  658.344164][ T5123] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  658.511438][T15119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  658.524669][T15119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  658.576472][ T5220] hid (null): unknown global tag 0xd
[  658.592001][ T5220] hid (null): unknown global tag 0xe
[  658.597715][ T5123] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  658.606938][ T5220] hid (null): report_id 908678640 is invalid
[  658.613555][ T5123] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  658.622788][ T5220] hid (null): report_id 12511 is invalid
[  658.635248][ T5123] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.646548][ T5220] hid-generic 0003:0158:0100.0052: unknown main item tag 0x1
[  658.658448][ T5220] hid-generic 0003:0158:0100.0052: unexpected long global item
[  658.669254][ T5123] usb 3-1: config 0 descriptor??
[  658.675287][ T5220] hid-generic 0003:0158:0100.0052: probe with driver hid-generic failed with error -22
[  658.810420][  T784] usb 4-1: USB disconnect, device number 73
[  659.523215][ T5093] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  659.552431][ T5220] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  659.672407][  T784] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  659.710401][ T5093] usb 2-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6
[  659.721043][ T5093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.731115][ T5093] usb 2-1: Product: syz
[  659.738187][ T5093] usb 2-1: Manufacturer: syz
[  659.743109][ T5093] usb 2-1: SerialNumber: syz
[  659.751026][ T5093] usb 2-1: config 0 descriptor??
[  659.752595][ T5220] usb 1-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6
[  659.760541][ T5093] usb 2-1: Found UVC 0.00 device syz (30c9:0093)
[  659.771044][ T5220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.772882][ T5093] usb 2-1: No valid video chain found.
[  659.779536][ T5220] usb 1-1: Product: syz
[  659.795017][ T5220] usb 1-1: Manufacturer: syz
[  659.799844][ T5220] usb 1-1: SerialNumber: syz
[  659.811070][ T5220] usb 1-1: config 0 descriptor??
[  659.820439][ T5220] usb 1-1: Found UVC 0.00 device syz (30c9:0093)
[  659.828365][ T5220] usb 1-1: No valid video chain found.
[  659.852718][  T784] usb 4-1: Using ep0 maxpacket: 16
[  659.860473][  T784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  659.871921][  T784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  659.881957][  T784] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  659.891349][  T784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.901538][  T784] usb 4-1: config 0 descriptor??
[  660.032725][ T5123] usb 2-1: USB disconnect, device number 93
[  660.082921][ T5122] usb 1-1: USB disconnect, device number 70
[  660.337640][T15158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  660.347614][T15158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  660.357714][  T784] hid (null): report_id 0 is invalid
[  660.364795][  T784] hid (null): unknown global tag 0xd
[  660.370141][  T784] hid (null): unknown global tag 0xe
[  660.375567][  T784] hid (null): report_id 908678640 is invalid
[  660.381944][  T784] hid (null): report_id 12511 is invalid
[  660.393706][  T784] hid-generic 0003:0158:0100.0053: unknown main item tag 0x1
[  660.401200][  T784] hid-generic 0003:0158:0100.0053: unexpected long global item
[  660.409730][  T784] hid-generic 0003:0158:0100.0053: probe with driver hid-generic failed with error -22
[  660.573487][  T784] usb 4-1: USB disconnect, device number 74
[  661.065773][  T784] usb 3-1: USB disconnect, device number 65
[  661.510609][T15198] sctp: [Deprecated]: syz.4.2788 (pid 15198) Use of int in max_burst socket option.
[  661.510609][T15198] Use struct sctp_assoc_value instead
[  662.335529][ T5220] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  662.532267][ T5122] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  662.574568][ T5220] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  662.583716][ T5220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.595392][ T5220] usb 1-1: config 0 descriptor??
[  662.714609][ T5122] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  662.724239][ T5122] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.732654][T12036] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  662.743357][ T5122] usb 2-1: config 0 descriptor??
[  662.936142][T12036] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  662.945508][T12036] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  662.961511][T12036] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.992474][T12036] usb 5-1: config 0 descriptor??
[  663.014140][ T5220] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  663.171328][ T5122] gs_usb 2-1:0.0: Configuring for 1 interfaces
[  663.372872][ T5122] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE)
[  663.382013][ T5122] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32
[  663.808661][ T5220] usb 1-1: USB disconnect, device number 71
[  664.591858][T15240] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0
[  665.315513][ T5220] usb 2-1: USB disconnect, device number 94
[  665.526691][T15256] netlink: 'syz.1.2802': attribute type 1 has an invalid length.
[  665.570552][ T5220] usb 5-1: USB disconnect, device number 65
[  665.984955][T15274] sctp: [Deprecated]: syz.2.2806 (pid 15274) Use of int in max_burst socket option.
[  665.984955][T15274] Use struct sctp_assoc_value instead
[  669.196269][ T5088] Bluetooth: hci1: link tx timeout
[  669.202408][ T5088] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  669.216994][ T5088] Bluetooth: hci1: link tx timeout
[  669.222306][ T5088] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  669.227841][   T29] audit: type=1326 audit(1719955315.980:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15305 comm="syz.2.2815" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f478d375f19 code=0x0
[  669.462246][T12036] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  669.647714][T12036] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  669.667873][T12036] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  669.691569][T12036] usb 2-1: config 0 descriptor??
[  669.826157][ T5123] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  670.030631][ T5123] usb 5-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6
[  670.051299][ T5123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.069669][ T5123] usb 5-1: Product: syz
[  670.079592][ T5123] usb 5-1: Manufacturer: syz
[  670.088850][ T5123] usb 5-1: SerialNumber: syz
[  670.107480][T12036] gs_usb 2-1:0.0: Configuring for 1 interfaces
[  670.110485][ T5123] usb 5-1: config 0 descriptor??
[  670.131960][ T5123] usb 5-1: Found UVC 0.00 device syz (30c9:0093)
[  670.138448][ T5123] usb 5-1: No valid video chain found.
[  670.314753][T12036] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE)
[  670.323443][T12036] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32
[  670.375255][  T784] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  670.458461][ T5123] usb 5-1: USB disconnect, device number 66
[  670.572287][  T784] usb 3-1: Using ep0 maxpacket: 16
[  670.584474][  T784] usb 3-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config
[  670.602315][  T784] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  670.631335][  T784] usb 3-1: New USB device found, idVendor=1b80, idProduct=c161, bcdDevice=ce.43
[  670.651164][  T784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.672335][  T784] usb 3-1: Product: syz
[  670.682554][  T784] usb 3-1: Manufacturer: syz
[  670.687274][  T784] usb 3-1: SerialNumber: syz
[  670.706868][  T784] usb 3-1: config 0 descriptor??
[  670.963347][  T784] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  670.983177][  T784] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  671.008342][  T784] usb 3-1: USB disconnect, device number 66
[  671.312376][ T5088] Bluetooth: hci1: command 0x0406 tx timeout
[  672.567635][ T5220] usb 2-1: USB disconnect, device number 95
[  673.372552][ T5075] Bluetooth: hci1: command 0x0406 tx timeout
[  673.418289][ T5088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  673.434296][ T5088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  673.452454][ T5088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  673.466453][ T5088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  673.477504][ T5088] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  673.485310][ T5088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  675.612399][ T5075] Bluetooth: hci4: command tx timeout
[  675.657045][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2831'.
[  676.206296][ T5125] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  676.478501][ T5125] usb 1-1: Using ep0 maxpacket: 16
[  676.525701][T15217] ------------[ cut here ]------------
[  676.532022][T15217] ida_free called for id=8192 which is not allocated.
[  676.549768][ T5125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  676.615315][T15217] WARNING: CPU: 1 PID: 15217 at lib/idr.c:525 ida_free+0x370/0x420
[  676.623663][T15217] Modules linked in:
[  676.627613][T15217] CPU: 1 PID: 15217 Comm: syz.3.2795 Not tainted 6.10.0-rc6-syzkaller-00051-g1dfe225e9af5 #0
[  676.637998][T15217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  676.648207][T15217] RIP: 0010:ida_free+0x370/0x420
SYZFAIL: failed to recv rpc
fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor)
[  676.654099][T15217] Code: 10 42 80 3c 28 00 74 05 e8 2d 33 88 f6 48 8b 7c 24 40 4c 89 fe e8 60 a0 17 00 90 48 c7 c7 60 5f eb 8c 89 de e8 71 f5 e7 f5 90 <0f> 0b 90 90 eb 3d e8 15 c7 25 f6 49 bd 00 00 00 00 00 fc ff df 4d
[  676.674446][T15217] RSP: 0018:ffffc9000d1476c0 EFLAGS: 00010246
[  676.680567][T15217] RAX: 27c28136a629ff00 RBX: 0000000000002000 RCX: ffff888028c79e00
[  676.688868][T15217] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  676.697127][T15217] RBP: ffffc9000d1477b0 R08: ffffffff81585742 R09: fffffbfff1c39994
[  676.706138][T15217] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffffc9000d147700
[  676.714616][T15217] R13: dffffc0000000000 R14: ffff88802ddec0a0 R15: 0000000000000246
[  676.723094][T15217] FS:  0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  676.732077][T15217] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  676.738819][T15217] CR2: 0000000000000000 CR3: 000000002278e000 CR4: 00000000003526f0
[  676.746862][T15217] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  676.754891][T15217] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  676.762960][T15217] Call Trace:
[  676.766233][T15217]  <TASK>
[  676.769152][T15217]  ? __warn+0x163/0x4e0
[  676.773364][T15217]  ? ida_free+0x370/0x420
[  676.777691][T15217]  ? report_bug+0x2b3/0x500
[  676.782309][T15217]  ? ida_free+0x370/0x420
[  676.786643][T15217]  ? handle_bug+0x3e/0x70
[  676.790962][T15217]  ? exc_invalid_op+0x1a/0x50
[  676.795746][T15217]  ? asm_exc_invalid_op+0x1a/0x20
[  676.800769][T15217]  ? __warn_printk+0x292/0x360
[  676.806086][T15217]  ? ida_free+0x370/0x420
[  676.810422][T15217]  ? __pfx_ida_free+0x10/0x10
[  676.815561][T15217]  ? synchronize_rcu+0x11b/0x360
[  676.820501][T15217]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  676.826576][T15217]  hci_conn_del+0x746/0xc40
[  676.831102][T15217]  hci_conn_hash_flush+0x18e/0x240
[  676.836289][T15217]  hci_dev_close_sync+0x911/0xf60
[  676.841352][T15217]  hci_unregister_dev+0x1db/0x4e0
[  676.846544][T15217]  vhci_release+0x83/0xd0
[  676.850928][T15217]  ? __pfx_vhci_release+0x10/0x10
[  676.856197][T15217]  __fput+0x24a/0x8a0
[  676.860250][T15217]  task_work_run+0x24f/0x310
[  676.865009][T15217]  ? __pfx_task_work_run+0x10/0x10
[  676.870170][T15217]  ? do_exit+0xa22/0x27e0
[  676.874719][T15217]  ? kmem_cache_free+0x145/0x350
[  676.879716][T15217]  do_exit+0xa27/0x27e0
[  676.884098][T15217]  ? __pfx_do_exit+0x10/0x10
[  676.888815][T15217]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  676.894384][T15217]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  676.900410][T15217]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  676.907829][T15217]  ? _raw_spin_lock_irq+0xdf/0x120
[  676.913767][T15217]  do_group_exit+0x207/0x2c0
[  676.918488][T15217]  ? _raw_spin_unlock_irq+0x23/0x50
[  676.923804][T15217]  ? lockdep_hardirqs_on+0x99/0x150
[  676.929049][T15217]  get_signal+0x16a1/0x1740
[  676.933654][T15217]  ? __pfx_get_signal+0x10/0x10
[  676.938598][T15217]  arch_do_signal_or_restart+0x96/0x860
[  676.944303][T15217]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  676.950499][T15217]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  676.956703][T15217]  ? syscall_exit_to_user_mode+0xa3/0x360
[  676.962541][T15217]  syscall_exit_to_user_mode+0xc9/0x360
[  676.968144][T15217]  do_syscall_64+0x100/0x230
[  676.972866][T15217]  ? clear_bhb_loop+0x35/0x90
[  676.977592][T15217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  676.983623][T15217] RIP: 0033:0x7f5e80775f19
[  676.988138][T15217] Code: Unable to access opcode bytes at 0x7f5e80775eef.
[  676.995385][T15217] RSP: 002b:00007f5e814cb048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  677.002489][  T784] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  677.004216][T15217] RAX: 000000000003ff6f RBX: 00007f5e80903f60 RCX: 00007f5e80775f19
[  677.020712][T15217] RDX: 03ffffffffffff67 RSI: 0000000020002440 RDI: 000000000000000a
[  677.029613][T15217] RBP: 00007f5e807e4bcd R08: 0000000000000000 R09: 0000000000000000
[  677.037753][T15217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  677.045892][T15217] R13: 000000000000000b R14: 00007f5e80903f60 R15: 00007ffd13d6d818
[  677.053998][T15217]  </TASK>
[  677.057039][T15217] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  677.064320][T15217] CPU: 1 PID: 15217 Comm: syz.3.2795 Not tainted 6.10.0-rc6-syzkaller-00051-g1dfe225e9af5 #0
[  677.074465][T15217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  677.084743][T15217] Call Trace:
[  677.088097][T15217]  <TASK>
[  677.091050][T15217]  dump_stack_lvl+0x241/0x360
[  677.095814][T15217]  ? __pfx_dump_stack_lvl+0x10/0x10
[  677.101143][T15217]  ? __pfx__printk+0x10/0x10
[  677.105761][T15217]  ? vscnprintf+0x5d/0x90
[  677.110100][T15217]  panic+0x349/0x860
[  677.114007][T15217]  ? __warn+0x172/0x4e0
[  677.118159][T15217]  ? __pfx_panic+0x10/0x10
[  677.122582][T15217]  __warn+0x346/0x4e0
[  677.126564][T15217]  ? ida_free+0x370/0x420
[  677.130895][T15217]  report_bug+0x2b3/0x500
[  677.135222][T15217]  ? ida_free+0x370/0x420
[  677.139548][T15217]  handle_bug+0x3e/0x70
[  677.143890][T15217]  exc_invalid_op+0x1a/0x50
[  677.148434][T15217]  asm_exc_invalid_op+0x1a/0x20
[  677.153492][T15217] RIP: 0010:ida_free+0x370/0x420
[  677.158468][T15217] Code: 10 42 80 3c 28 00 74 05 e8 2d 33 88 f6 48 8b 7c 24 40 4c 89 fe e8 60 a0 17 00 90 48 c7 c7 60 5f eb 8c 89 de e8 71 f5 e7 f5 90 <0f> 0b 90 90 eb 3d e8 15 c7 25 f6 49 bd 00 00 00 00 00 fc ff df 4d
[  677.178108][T15217] RSP: 0018:ffffc9000d1476c0 EFLAGS: 00010246
[  677.184205][T15217] RAX: 27c28136a629ff00 RBX: 0000000000002000 RCX: ffff888028c79e00
[  677.192194][T15217] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  677.200260][T15217] RBP: ffffc9000d1477b0 R08: ffffffff81585742 R09: fffffbfff1c39994
[  677.208239][T15217] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffffc9000d147700
[  677.216221][T15217] R13: dffffc0000000000 R14: ffff88802ddec0a0 R15: 0000000000000246
[  677.224219][T15217]  ? __warn_printk+0x292/0x360
[  677.229071][T15217]  ? __pfx_ida_free+0x10/0x10
[  677.233746][T15217]  ? synchronize_rcu+0x11b/0x360
[  677.238705][T15217]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  677.244709][T15217]  hci_conn_del+0x746/0xc40
[  677.249236][T15217]  hci_conn_hash_flush+0x18e/0x240
[  677.254377][T15217]  hci_dev_close_sync+0x911/0xf60
[  677.259485][T15217]  hci_unregister_dev+0x1db/0x4e0
[  677.264549][T15217]  vhci_release+0x83/0xd0
[  677.268926][T15217]  ? __pfx_vhci_release+0x10/0x10
[  677.273968][T15217]  __fput+0x24a/0x8a0
[  677.277991][T15217]  task_work_run+0x24f/0x310
[  677.282587][T15217]  ? __pfx_task_work_run+0x10/0x10
[  677.287701][T15217]  ? do_exit+0xa22/0x27e0
[  677.292042][T15217]  ? kmem_cache_free+0x145/0x350
[  677.297021][T15217]  do_exit+0xa27/0x27e0
[  677.301215][T15217]  ? __pfx_do_exit+0x10/0x10
[  677.305809][T15217]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  677.311186][T15217]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  677.317172][T15217]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  677.323500][T15217]  ? _raw_spin_lock_irq+0xdf/0x120
[  677.328640][T15217]  do_group_exit+0x207/0x2c0
[  677.333252][T15217]  ? _raw_spin_unlock_irq+0x23/0x50
[  677.338475][T15217]  ? lockdep_hardirqs_on+0x99/0x150
[  677.343685][T15217]  get_signal+0x16a1/0x1740
[  677.348216][T15217]  ? __pfx_get_signal+0x10/0x10
[  677.353072][T15217]  arch_do_signal_or_restart+0x96/0x860
[  677.358627][T15217]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  677.364767][T15217]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  677.370742][T15217]  ? syscall_exit_to_user_mode+0xa3/0x360
[  677.376456][T15217]  syscall_exit_to_user_mode+0xc9/0x360
[  677.382018][T15217]  do_syscall_64+0x100/0x230
[  677.386722][T15217]  ? clear_bhb_loop+0x35/0x90
[  677.391400][T15217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.397299][T15217] RIP: 0033:0x7f5e80775f19
[  677.401702][T15217] Code: Unable to access opcode bytes at 0x7f5e80775eef.
[  677.408722][T15217] RSP: 002b:00007f5e814cb048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  677.417167][T15217] RAX: 000000000003ff6f RBX: 00007f5e80903f60 RCX: 00007f5e80775f19
[  677.425163][T15217] RDX: 03ffffffffffff67 RSI: 0000000020002440 RDI: 000000000000000a
[  677.433147][T15217] RBP: 00007f5e807e4bcd R08: 0000000000000000 R09: 0000000000000000
[  677.441112][T15217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  677.449176][T15217] R13: 000000000000000b R14: 00007f5e80903f60 R15: 00007ffd13d6d818
[  677.457160][T15217]  </TASK>
[  677.460468][T15217] Kernel Offset: disabled
[  677.464893][T15217] Rebooting in 86400 seconds..