last executing test programs:

23m48.34019516s ago: executing program 32 (id=273):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r2 = dup(r1)
ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x4b66, &(0x7f0000000280))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="12000000170000000400000006"], 0x48)
recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0xade}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/150, 0x96}], 0x1}, 0xfffffff8}], 0x2, 0x10002, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, <r7=>0x0]})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r6, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000001280), 0x0, r7, 0x0, '\x00', 0x1ffffffffffffd64, 0x20})

21m11.237974424s ago: executing program 33 (id=649):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000e05000300000000000900010073797a30000000000900020073797a3200000000"], 0x80}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={<r5=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)

13m31.615533017s ago: executing program 6 (id=1745):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
iopl(0x3)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x3ff, 0x1)
syz_io_uring_setup(0x111, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r2, 0x6, 0x5, 0x0, &(0x7f0000000040))
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
fcntl$getflags(0xffffffffffffffff, 0x401)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff99)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x20001, 0x2)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, 0x0)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

13m29.080190889s ago: executing program 6 (id=1753):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20008016)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000100))
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x700, 0x8000, 0x815b, 0x1ff, {{0x5, 0x4, 0x1, 0x2, 0x14, 0x65, 0x0, 0x9, 0x2f, 0x0, @loopback, @private=0xa010100}}}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000)
mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read$FUSE(r2, &(0x7f00000007c0)={0x2020}, 0x2020)

13m27.698992592s ago: executing program 6 (id=1756):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
iopl(0x3)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x3ff, 0x1)
syz_io_uring_setup(0x111, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r2, 0x6, 0x5, 0x0, &(0x7f0000000040))
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
fcntl$getflags(0xffffffffffffffff, 0x401)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff99)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x20001, 0x2)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, 0x0)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

13m25.56952042s ago: executing program 6 (id=1761):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, 0x0, 0x0)
r1 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
shutdown(r0, 0x1)

13m24.355133715s ago: executing program 6 (id=1765):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f000000a480), 0xffffffffffffffff)
semget(0x2, 0x7ec2de97fe2621b0, 0x12b)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x20, 0x0)

13m22.892433305s ago: executing program 0 (id=1766):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=<r2=>0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x101)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r3, 0x10d, 0x800000000d, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[], 0x3ce0}, 0x1, 0x0, 0x0, 0x4024011}, 0x40084)
syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002c00010026bd7000", @ANYRES32=0x0, @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

13m22.689641254s ago: executing program 6 (id=1768):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5414, &(0x7f0000000000))
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000009eecdcb700", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301)
prlimit64(r1, 0x3, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r7, 0x80189439, 0x0)

13m21.547806643s ago: executing program 0 (id=1770):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}}], 0x2, 0x40488e4)

13m20.435444263s ago: executing program 0 (id=1774):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x6, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x6, 0x2, 0x5, 0x2, 0xbd, 0x80000000, 0x102d, 0x8, 0x1, 0x3, 0x1, 0x1, 0x7, 0x6, 0x200, 0x80, 0x7, 0x7, 0x7, 0x8, 0x2, 0x2, 0x7, 0xffffffffffffffff, 0x3, 0x900000001, 0x403, 0x1, 0x4, 0x101, 0x3, 0x3, 0x1, 0x0, 0x6, 0x9, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0xffffffffffffffff, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x0, 0x9, 0x1800000, 0x4, 0x82b, 0x8, 0x5, 0x0, 0x9, 0xfffffffffffffffa, 0x3ff, 0x100000000000006, 0x2, 0x2f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x7, 0x200, 0x77d, 0xb3, 0x5, 0x539, 0x623b, 0x6, 0x0, 0x7, 0x4, 0x200, 0x7, 0x8, 0x0, 0x5, 0x93, 0x8, 0x401, 0x2, 0x2775e12f, 0x680000000000, 0x5, 0x7, 0xe88, 0x80000004, 0x0, 0xfffffffffffffffa, 0x10001, 0x8, 0x8, 0x1000, 0x0, 0x5, 0x7, 0xfffffffffffff000, 0x10000, 0x7ffd, 0xfffffffffffffff7, 0x6, 0x46b, 0x8, 0x5, 0x6, 0x4, 0x0, 0x7f, 0xd1]})

13m15.547277902s ago: executing program 0 (id=1784):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x4c80, 0x0)
bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x417, 0x4)
connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x1d4c, 0x0, 0x0)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0)

13m14.58935206s ago: executing program 0 (id=1786):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f000000a480), 0xffffffffffffffff)
semget(0x2, 0x7ec2de97fe2621b0, 0x12b)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x20, 0x0)

13m13.577455124s ago: executing program 0 (id=1789):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5414, &(0x7f0000000000))
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301)
prlimit64(r1, 0x3, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

13m6.98681091s ago: executing program 34 (id=1768):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5414, &(0x7f0000000000))
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000009eecdcb700", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301)
prlimit64(r1, 0x3, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r7, 0x80189439, 0x0)

12m58.519905796s ago: executing program 35 (id=1789):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5414, &(0x7f0000000000))
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301)
prlimit64(r1, 0x3, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

8m32.698432063s ago: executing program 5 (id=2384):
bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

8m30.497696888s ago: executing program 5 (id=2388):
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e, 0x100}})

8m28.046689919s ago: executing program 5 (id=2391):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000240)={0x40, 0x0, 0xb9, "19ea62bfcb090f58a4e52454f6bcd2e559ddbe3e3611df07704b80fad9847a712cc5b82ab0dd4b6c761ed29bf6d71b000ce70148f5fb17221eb46979d81130710e1d33954c603fcde743118a1cf42afc85192e8f71dbefb71c5519a9b0c70bd3a8116ac13109aa06189263bf3761691144744ce886c5527bf9aa181c6dab9ff0f5b0157ee4c5a707b457178ace6e1b815a5a90286e6c4916e0019a2928561bab0111a3405fe94335de43cbe5d19484e3fc2b45ce648b789f1f"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xc}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fstat(r2, &(0x7f0000000040))
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x20000)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040))

8m24.104260066s ago: executing program 5 (id=2398):
socket$packet(0x11, 0x3, 0x300)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="0e0000020500020008a173d2d614a40cbf9521a287ff35e29df7ba416435f0f29e085990b8b58f8034eb622895d1b3", @ANYRES16=r0, @ANYRES64])
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_vhci(0x0, 0x7)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xff2e)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$FBIOBLANK(r4, 0x4611, 0x1)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, &(0x7f0000000000))

8m22.134024645s ago: executing program 5 (id=2403):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
sendmmsg$unix(r6, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0)

8m19.591997605s ago: executing program 5 (id=2406):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f000000a480), 0xffffffffffffffff)
semget(0x2, 0x7ec2de97fe2621b0, 0x12b)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x20, 0x0)

8m4.530217374s ago: executing program 36 (id=2406):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f000000a480), 0xffffffffffffffff)
semget(0x2, 0x7ec2de97fe2621b0, 0x12b)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x20, 0x0)

5m19.378348869s ago: executing program 7 (id=2767):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
socket$inet6(0xa, 0x6, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001740)=@newtaction={0x398, 0x30, 0x1, 0x0, 0x0, {}, [{0x384, 0x1, [@m_ct={0x58, 0x11, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x9}, @TCA_CT_ACTION={0x6, 0x3, 0x1d}, @TCA_CT_ZONE={0x6, 0x4, 0x9}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}, @m_vlan={0x38, 0x5, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x253}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0xbc, 0x1f, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0xff, 0x20000000, 0xc, 0x8}, 0x4e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x400000a, 0x6, 0xffffffffffffffff, 0x2, 0x6}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4620, 0x8, 0x4, 0x4}, 0x1c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xfffffffa, 0x8, 0xffff, 0x6111}, 0x74}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x1, 0x9, 0xfffffffb}, 0x5b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x8c, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x5d, 0x6, "6fdf31a3b60299855742a7f25e2191b6973b772134bfdd94d6b797f4eba3f6de2229788168b657b5b742406587df992e5fd4387a47bbd1f8186e73670f5d45de431dcb5447fcab3955225d147cb92ed084ac025018529d43f9"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x11}]}, {0x26, 0x6, "d0e33794532919542a4b58d07d6b1becb30b7375748d2c87be988eb7abb15b1734df"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x140, 0xb, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x1, 0x8, 0x1, 0xffffff81}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6bbc, 0x10000000, 0x9, 0xb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1ff, 0xffffffffffffffff, 0xd785}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0x8, 0x950, 0x3}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8e9f, 0x5, 0x2, 0x7, 0x1528}, 0x2}}]}, {0x72, 0x6, "c5f75d4911cc08d1d6e6ad6201c06fb84de7199f0bbcd0893a0c47eb1c5e7d892fafedbec05924a15aa466b0e517bcb96c5f67f530a62460af30ab403a335aef4127b2b95dba97d88121f3e67eac46179c329da05c564fa82f9f4ce44a36b0444f9596a9b0200e4d1dd0d157d6c4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x398}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x22020400)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x10, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x707b, 0x0, 0x2000004, 0x289}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e050d3e20"], 0x8)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x4, 0xc9}}}, 0x5)

5m17.549132768s ago: executing program 7 (id=2769):
socket$inet(0x2, 0x801, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000380)={{0x3, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x102, 0x0, 0x4})

5m16.380995674s ago: executing program 7 (id=2771):
socket$packet(0x11, 0x3, 0x300)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_vhci(0x0, 0x7)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xff2e)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$FBIOBLANK(r2, 0x4611, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, &(0x7f0000000000))

5m14.576218271s ago: executing program 7 (id=2774):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300))
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x5, 0x1000087}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$sg(0x0, 0x0, 0x8002)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r2=>0x0})
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20400, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2})
shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7})
syz_emit_ethernet(0x72, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x19, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x89, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @local, {[@timestamp_addr={0x44, 0x14, 0xd8, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x9}, {@broadcast, 0x5}]}, @cipso={0x86, 0x15, 0x3, [{0x6, 0xf, "15d837e11e53eb3694cc83c678"}]}, @cipso={0x86, 0x8, 0x3, [{0x7, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x2d, 0x3, 0x5, [{@broadcast, 0x3}, {@broadcast}]}, @generic={0x82, 0x3, "ec"}, @rr={0x7, 0x7, 0x57, [@remote]}]}}}}}}, 0x0)
close(r1)

5m11.852899849s ago: executing program 7 (id=2777):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x800)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

5m9.80757768s ago: executing program 7 (id=2780):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x52)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000140)='./file1\x00', 0x400017e)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xf8)
mkdir(&(0x7f00000003c0)='./bus\x00', 0x0)
mmap(&(0x7f00000d5000/0x1000)=nil, 0x1000, 0x100000d, 0x3032, 0xffffffffffffffff, 0xffffe000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000240)={{&(0x7f00004cd000/0x2000)=nil, 0x2000}, 0x1})
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2)
r3 = epoll_create(0x6)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc)
r4 = dup3(r2, r3, 0x0)
read$FUSE(r4, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

4m54.194186972s ago: executing program 37 (id=2780):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x52)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000140)='./file1\x00', 0x400017e)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xf8)
mkdir(&(0x7f00000003c0)='./bus\x00', 0x0)
mmap(&(0x7f00000d5000/0x1000)=nil, 0x1000, 0x100000d, 0x3032, 0xffffffffffffffff, 0xffffe000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000240)={{&(0x7f00004cd000/0x2000)=nil, 0x2000}, 0x1})
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2)
r3 = epoll_create(0x6)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc)
r4 = dup3(r2, r3, 0x0)
read$FUSE(r4, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

15.196768446s ago: executing program 2 (id=3407):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
r0 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x9, 0x0)

14.993498011s ago: executing program 2 (id=3411):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120500000000000904000000ff"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000040)={0x20, 0xb, 0x2, "d82f"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="200f4300"], 0x0, 0x0, 0x0, 0x0})

12.676581115s ago: executing program 2 (id=3435):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
write$P9_RSETATTR(r0, 0x0, 0x0)

12.621111392s ago: executing program 2 (id=3436):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
open_tree(r0, &(0x7f00000001c0)='./file0/file0\x00', 0x1)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

12.458881888s ago: executing program 2 (id=3437):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000005500)=[{{&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000480)="688516", 0x3}], 0x1}}], 0x2, 0x40941)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r2=>0x0}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={r2, 0xa49a, 0x30}, 0xc)

12.44996367s ago: executing program 2 (id=3438):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13)
write(r0, 0x0, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000340)={0xff02, 0x4e34, 0x0, 0x5, 0x0, "5f730000a9003f00"})
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x5f)

12.282875724s ago: executing program 38 (id=3438):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13)
write(r0, 0x0, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000340)={0xff02, 0x4e34, 0x0, 0x5, 0x0, "5f730000a9003f00"})
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x5f)

7.768420427s ago: executing program 3 (id=3478):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000f00)={0x0, 0x20, &(0x7f0000000ec0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000170a0103000000000000000002000000090001"], 0x20}}, 0x0)

7.587612682s ago: executing program 3 (id=3481):
socket$nl_route(0x10, 0x3, 0x0)
close(0x4)
r0 = eventfd(0xb55f)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8, @ANYRES8=r0], 0x0)

7.236356587s ago: executing program 9 (id=3488):
r0 = socket$igmp6(0xa, 0x3, 0x3a)
getsockopt$MRT6(r0, 0x29, 0xce, 0x0, 0x0)

7.14016781s ago: executing program 9 (id=3489):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x8000)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x2b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10)
shutdown(r1, 0x1)

7.129016252s ago: executing program 9 (id=3490):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil)

6.232199135s ago: executing program 3 (id=3505):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x0, 0x0, 0x1, "a6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000f80)=ANY=[@ANYBLOB="00df19"], 0x0, 0x0})

5.468277495s ago: executing program 9 (id=3519):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
statx(0xffffffffffffffff, 0x0, 0x1000, 0x80, 0x0)

5.296022381s ago: executing program 9 (id=3522):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x0, 0x0, 0x4, 0x0, 0x80000044, 0x2, 0xe, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0})

5.116133384s ago: executing program 8 (id=3527):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, &(0x7f00000000c0), 0x10)
sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
recvfrom$l2tp(r0, 0x0, 0x0, 0x62, 0x0, 0x0)

4.984311483s ago: executing program 8 (id=3529):
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x20000)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000680)={{0x0, 0x1}, {0xe}, 0x0, 0x2})

4.9572176s ago: executing program 8 (id=3530):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011170fd00090582020010"], 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
syz_usb_control_io$hid(r0, 0x0, 0x0)

4.410538313s ago: executing program 4 (id=3532):
pipe2(&(0x7f0000000840)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x1, 0x0)
sendmmsg(r3, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="db01", 0x2}], 0x1}}], 0x1, 0x0)
read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0x2020)

4.260174752s ago: executing program 4 (id=3533):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000040)='5', 0x1)
setsockopt$inet_int(r0, 0x0, 0x33, 0x0, 0x0)
getsockopt$inet_mptcp_buf(r0, 0x11c, 0x0, 0x0, 0x0)

4.173933824s ago: executing program 4 (id=3534):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r1, 0x0, 0xee01)

4.020648248s ago: executing program 4 (id=3536):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
open_tree(r0, &(0x7f00000001c0)='./file0/file0\x00', 0x1)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

3.913963411s ago: executing program 4 (id=3537):
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x80080400)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0xd5, &(0x7f0000000000), &(0x7f0000000080)=0x4)

3.620271821s ago: executing program 4 (id=3538):
syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='oom_adj\x00')
r0 = socket(0x1d, 0x2, 0x6)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX])

3.449951688s ago: executing program 39 (id=3538):
syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='oom_adj\x00')
r0 = socket(0x1d, 0x2, 0x6)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX])

3.353040676s ago: executing program 9 (id=3541):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000ec0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000740)={0x20, 0x10}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

3.280057296s ago: executing program 8 (id=3542):
socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
unshare(0x24060400)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0xfffffffe}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

3.185614002s ago: executing program 8 (id=3544):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x56, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

2.991566252s ago: executing program 8 (id=3545):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000ec0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000740)={0x20, 0x10}, 0x0, 0x0, 0x0, 0x0})

2.452886812s ago: executing program 3 (id=3547):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
open_tree(r0, &(0x7f00000001c0)='./file0/file0\x00', 0x1)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

2.332403594s ago: executing program 3 (id=3549):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)

2.034984353s ago: executing program 3 (id=3552):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20000)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, 0x0)

1.705045803s ago: executing program 40 (id=3552):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20000)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, 0x0)

1.224062039s ago: executing program 1 (id=3557):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r0, 0x0, 0xee01)

1.17845277s ago: executing program 1 (id=3558):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="400f4d00000069"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000ec0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)

565.856541ms ago: executing program 1 (id=3559):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000140)={0x1, r1, 0xffffffdb, 0x7ffffe02, 0xc, 0x1fd, 0x1})

455.319602ms ago: executing program 1 (id=3560):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
accept4(r1, &(0x7f0000000100)=@pptp, 0x0, 0x800)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x4000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)

310.019527ms ago: executing program 1 (id=3561):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000020000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"})

0s ago: executing program 1 (id=3562):
r0 = socket$inet6(0xa, 0x1, 0x100)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x48c100)
ioctl$CEC_ADAP_G_PHYS_ADDR(r2, 0x80026101, 0x0)
ioctl$sock_proto_private(r0, 0x8920, &(0x7f0000000140))
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x2, 0x2b0, 0xffffffff, 0x1c8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'dummy0\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@remote, @private, 0x0, 0x0, 'team0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "90617ae6e2ad43980c3bec242f9040a700efba1f7ef6f77096db813f042b"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8)

kernel console output (not intermixed with test programs):

64494][ T5881] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1373.394535][ T5881] usb 10-1: usb_control_msg returned -32
[ 1373.400249][ T5881] usbtmc 10-1:16.0: can't read capabilities
[ 1373.453715][T12801] Bluetooth: hci0: command tx timeout
[ 1373.557837][   T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1373.648142][T16626] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1373.662631][T16626] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1373.853863][T16626] bridge_slave_0: entered allmulticast mode
[ 1373.880669][T16626] bridge_slave_0: entered promiscuous mode
[ 1373.915543][   T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1374.771705][T16660] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1374.787374][T16626] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1374.797945][T16626] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1374.806537][T16626] bridge_slave_1: entered allmulticast mode
[ 1374.813497][T16626] bridge_slave_1: entered promiscuous mode
[ 1374.871305][   T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1374.977802][T16626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1374.996648][T16626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1375.048240][T16626] team0: Port device team_slave_0 added
[ 1375.058179][T16626] team0: Port device team_slave_1 added
[ 1375.064933][ T5881] usb 10-1: USB disconnect, device number 7
[ 1375.103789][ T5880] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1375.133138][T16626] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1375.140866][T16626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1375.170785][T16626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1375.184261][T13039] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[ 1375.193740][T13615] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 1375.203468][T16626] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1375.211014][T16626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1375.237252][T16626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1375.249119][   T11] bridge_slave_1: left allmulticast mode
[ 1375.257287][   T11] bridge_slave_1: left promiscuous mode
[ 1375.263268][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1375.272468][ T5880] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1375.285962][   T11] bridge_slave_0: left allmulticast mode
[ 1375.291634][   T11] bridge_slave_0: left promiscuous mode
[ 1375.297502][ T5880] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1375.308770][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1375.316096][ T5880] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1375.330498][ T5880] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1375.338849][ T5880] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1375.358304][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1375.379970][T13615] usb 3-1: Using ep0 maxpacket: 8
[ 1375.385210][T13039] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1375.397966][T13039] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1375.398090][T13615] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1375.419819][T13039] usb 9-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00
[ 1375.429858][ T5880] usb 2-1: config 0 descriptor??
[ 1375.435144][T13039] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1375.446400][T13615] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1375.457953][T13615] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1375.469047][T13039] usb 9-1: config 0 descriptor??
[ 1375.474348][T13615] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1375.487473][T13615] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1375.498963][T13615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1375.543881][T12801] Bluetooth: hci0: command tx timeout
[ 1375.553782][ T5881] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1375.707170][ T5881] usb 10-1: Using ep0 maxpacket: 8
[ 1375.720530][ T5881] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1375.730819][T13615] usb 3-1: usb_control_msg returned -32
[ 1375.731095][ T5881] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1375.746980][ T5881] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1375.758079][ T5881] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1375.758550][T13615] usbtmc 3-1:16.0: can't read capabilities
[ 1375.790562][ T5881] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1375.806178][ T5881] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1376.007297][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1376.030380][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1376.052958][ T5881] usb 10-1: GET_CAPABILITIES returned 0
[ 1376.062290][   T11] bond0 (unregistering): Released all slaves
[ 1376.085855][ T5881] usbtmc 10-1:16.0: can't read capabilities
[ 1376.741620][T16675] netlink: 'syz.8.2824': attribute type 29 has an invalid length.
[ 1376.858890][T13039] hid-generic 0003:05AC:4262.0020: unbalanced delimiter at end of report description
[ 1376.875261][ T5879] usb 10-1: USB disconnect, device number 8
[ 1376.875694][T13039] hid-generic 0003:05AC:4262.0020: probe with driver hid-generic failed with error -22
[ 1376.972092][T16626] hsr_slave_0: entered promiscuous mode
[ 1376.979530][T16626] hsr_slave_1: entered promiscuous mode
[ 1376.987392][T16626] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1376.999849][T16626] Cannot create hsr debugfs directory
[ 1377.211944][   T11] hsr_slave_0: left promiscuous mode
[ 1377.218948][   T11] hsr_slave_1: left promiscuous mode
[ 1377.224944][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1377.232586][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1377.242384][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1377.250196][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1377.279815][   T11] veth1_macvtap: left promiscuous mode
[ 1377.285491][   T11] veth0_macvtap: left promiscuous mode
[ 1377.291092][   T11] veth1_vlan: left promiscuous mode
[ 1377.296700][   T11] veth0_vlan: left promiscuous mode
[ 1377.628662][T12801] Bluetooth: hci0: command tx timeout
[ 1377.647888][T16678] syz.9.2827: attempt to access beyond end of device
[ 1377.647888][T16678] nbd9: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1377.663829][T16678] gfs2: error -5 reading superblock
[ 1378.175453][  T974] usb 9-1: USB disconnect, device number 26
[ 1378.204819][ T5880] usbhid 2-1:0.0: can't add hid device: -71
[ 1378.226162][ T5880] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1378.275450][ T5880] usb 2-1: USB disconnect, device number 78
[ 1378.722191][T16686] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[ 1378.722191][T16686]    program syz.1.2829 not setting count and/or reply_len properly
[ 1379.449870][ T5879] usb 3-1: USB disconnect, device number 76
[ 1379.635625][T16685] ceph: No mds server is up or the cluster is laggy
[ 1379.704548][T12801] Bluetooth: hci0: command tx timeout
[ 1380.007265][T16699] usb usb9: usbfs: process 16699 (syz.2.2831) did not claim interface 0 before use
[ 1381.603861][ T5880] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1381.729173][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 1381.791450][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1381.822951][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1381.880955][ T5880] usb 3-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00
[ 1381.939887][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1381.979752][ T5880] usb 3-1: config 0 descriptor??
[ 1382.404587][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 1383.537742][T16712] netlink: 'syz.2.2833': attribute type 29 has an invalid length.
[ 1383.833226][ T5880] hid-generic 0003:05AC:4262.0021: unbalanced delimiter at end of report description
[ 1383.960816][ T5880] hid-generic 0003:05AC:4262.0021: probe with driver hid-generic failed with error -22
[ 1387.487536][ T5880] usb 3-1: USB disconnect, device number 77
[ 1387.830857][T16736] syz.2.2841: attempt to access beyond end of device
[ 1387.830857][T16736] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1387.844456][T16736] gfs2: error -5 reading superblock
[ 1388.270468][T16739] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1388.769417][T16743] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1389.559258][T16753] syz.2.2845: attempt to access beyond end of device
[ 1389.559258][T16753] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1389.577300][T16753] gfs2: error -5 reading superblock
[ 1390.822282][T16764] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[ 1390.822282][T16764]    program syz.1.2848 not setting count and/or reply_len properly
[ 1391.542973][T16626] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1392.475194][T16626] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1392.642052][T16626] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1392.693265][T16626] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1392.715337][   T35] bridge_slave_1: left allmulticast mode
[ 1392.721466][   T35] bridge_slave_1: left promiscuous mode
[ 1392.934315][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1392.943039][   T35] bridge_slave_0: left allmulticast mode
[ 1392.950419][   T35] bridge_slave_0: left promiscuous mode
[ 1392.959708][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1394.737570][T16781] syz.1.2852: attempt to access beyond end of device
[ 1394.737570][T16781] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1394.752241][T16781] gfs2: error -5 reading superblock
[ 1394.828700][   T35] team0: Port device bridge1 removed
[ 1395.039337][T16790] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1396.065488][   T35] team0: Port device bridge2 removed
[ 1398.353069][T16801] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1398.583559][   T35] bond0 (unregistering): left allmulticast mode
[ 1398.592205][   T35] bond_slave_0: left allmulticast mode
[ 1398.622974][   T35] bond_slave_1: left allmulticast mode
[ 1398.881483][   T35] bond0 (unregistering): left promiscuous mode
[ 1399.065018][   T35] bond_slave_0: left promiscuous mode
[ 1399.072006][   T35] bond_slave_1: left promiscuous mode
[ 1399.586666][T16814] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1399.639607][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1399.700225][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1399.713210][   T35] bond0 (unregistering): Released all slaves
[ 1399.898101][   T35] : left promiscuous mode
[ 1400.508722][T16626] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1401.008916][T16626] 8021q: adding VLAN 0 to HW filter on device team0
[ 1401.057012][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1401.064187][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1401.087952][T16823] ceph: No mds server is up or the cluster is laggy
[ 1401.121898][T14761] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1401.129164][T14761] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1402.373407][T16841] syz.8.2867: attempt to access beyond end of device
[ 1402.373407][T16841] nbd8: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1402.388320][T16841] gfs2: error -5 reading superblock
[ 1404.710823][   T35] hsr_slave_0: left promiscuous mode
[ 1404.717392][   T35] hsr_slave_1: left promiscuous mode
[ 1404.723093][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1405.243848][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1405.271465][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1405.282897][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1405.366765][   T35] team0: left allmulticast mode
[ 1405.371819][   T35] team_slave_0: left allmulticast mode
[ 1405.382459][   T35] team_slave_1: left allmulticast mode
[ 1405.389470][   T35] team0: left promiscuous mode
[ 1405.398758][   T35] team_slave_0: left promiscuous mode
[ 1405.404584][   T35] team_slave_1: left promiscuous mode
[ 1405.411450][   T35] veth1_macvtap: left promiscuous mode
[ 1405.426199][   T35] veth0_macvtap: left promiscuous mode
[ 1405.431971][   T35] veth1_vlan: left promiscuous mode
[ 1410.529953][T16888] hub 2-0:1.0: USB hub found
[ 1410.535087][T16888] hub 2-0:1.0: 1 port detected
[ 1411.165786][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 1411.386407][   T35] team0 (unregistering): Port device team_slave_0 removed
[ 1411.725023][ T5879] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1412.025613][ T5879] usb 10-1: config 0 has an invalid interface number: 255 but max is 0
[ 1412.041635][ T5879] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1412.052018][ T5879] usb 10-1: config 0 has no interface number 0
[ 1412.058431][ T5879] usb 10-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53
[ 1412.073707][ T5879] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1412.091237][ T5879] usb 10-1: config 0 descriptor??
[ 1412.126937][ T5879] option 10-1:0.255: GSM modem (1-port) converter detected
[ 1413.163359][ T5880] usb 10-1: USB disconnect, device number 9
[ 1413.180592][ T5880] option 10-1:0.255: device disconnected
[ 1413.826090][T16626] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1413.899821][T16626] veth0_vlan: entered promiscuous mode
[ 1413.937015][T16626] veth1_vlan: entered promiscuous mode
[ 1413.973041][T16904] syz.8.2884: attempt to access beyond end of device
[ 1413.973041][T16904] nbd8: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1413.986474][T16904] gfs2: error -5 reading superblock
[ 1414.470285][T16626] veth0_macvtap: entered promiscuous mode
[ 1414.485710][T16626] veth1_macvtap: entered promiscuous mode
[ 1414.529230][T16626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1414.540358][T16626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1414.563820][T16626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1414.584646][T16626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1414.595006][T16626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1414.605710][T16626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1414.615880][T16626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1414.626564][T16626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1414.731535][T16626] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1414.821141][T16912] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1415.026121][T16626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1415.088340][T16626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1415.128971][T16626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1415.193152][T16915] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2886'.
[ 1415.211565][T16626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1415.252208][T16626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1415.300057][T16626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1415.348821][T16626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1415.373184][T16626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1415.401570][T16626] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1415.423161][T16915] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2886'.
[ 1415.432431][T16917] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2887'.
[ 1415.468407][T16626] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1415.487719][T16626] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1415.520148][T16626] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1415.543869][T16626] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1415.554011][T16921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2888'.
[ 1415.782616][T16927] geneve2: entered promiscuous mode
[ 1415.839832][T16927] geneve2: entered allmulticast mode
[ 1415.862485][T16929] ceph: No mds server is up or the cluster is laggy
[ 1416.368571][T14761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1416.453851][T14761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1416.656011][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1416.672104][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1419.086920][T16955] ipt_ECN: cannot use operation on non-tcp rule
[ 1419.697351][T16962] syz.2.2899: attempt to access beyond end of device
[ 1419.697351][T16962] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1419.710958][T16962] gfs2: error -5 reading superblock
[ 1423.301366][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.307873][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1424.712048][T16993] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1425.890177][T16997] syz.3.2912: attempt to access beyond end of device
[ 1425.890177][T16997] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1425.903735][T16997] gfs2: error -5 reading superblock
[ 1431.786775][T16908] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[ 1432.060290][T16908] usb 9-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1432.082516][T16908] usb 9-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1432.107262][T16908] usb 9-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1432.350120][T16908] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1432.364149][T16908] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1432.388885][T16908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1432.652426][T16908] usb 9-1: config 0 descriptor??
[ 1432.982707][T17057] syz.2.2923: attempt to access beyond end of device
[ 1432.982707][T17057] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1432.996612][T17057] gfs2: error -5 reading superblock
[ 1433.378134][T16908] usbhid 9-1:0.0: can't add hid device: -71
[ 1433.391980][T16908] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1433.406322][T17039] usb usb9: usbfs: process 17039 (syz.1.2918) did not claim interface 0 before use
[ 1433.424048][T17052] 9pnet_virtio: no channels available for device 127.0.0.1
[ 1433.490479][T16908] usb 9-1: USB disconnect, device number 27
[ 1435.130945][T17071] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[ 1435.394881][T17071] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[ 1435.530249][T17071] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[ 1435.661467][T17071] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[ 1435.684042][T17071] geneve2: entered promiscuous mode
[ 1435.725618][T17071] geneve2: entered allmulticast mode
[ 1435.878540][T13615] libceph: connect (1)[c::]:6789 error -101
[ 1435.885261][T13615] libceph: mon0 (1)[c::]:6789 connect error
[ 1435.934396][T17074] ceph: No mds server is up or the cluster is laggy
[ 1436.155356][T17076] syz.3.2930: attempt to access beyond end of device
[ 1436.155356][T17076] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1436.168571][T17076] gfs2: error -5 reading superblock
[ 1436.410417][T13615] libceph: connect (1)[c::]:6789 error -101
[ 1436.425654][T13615] libceph: mon0 (1)[c::]:6789 connect error
[ 1438.296864][T17104] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[ 1438.523742][T17104] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[ 1439.225846][T17104] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[ 1439.237402][T17104] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[ 1439.408922][T17104] geneve2: entered promiscuous mode
[ 1439.416478][T17104] geneve2: entered allmulticast mode
[ 1440.030611][T17121] XFS (nullb0): no-recovery mounts must be read-only.
[ 1441.861092][T11399] Bluetooth: hci4: command 0x0406 tx timeout
[ 1442.122353][T17134] ceph: No mds server is up or the cluster is laggy
[ 1442.161505][ T5879] libceph: connect (1)[c::]:6789 error -101
[ 1442.203971][ T5879] libceph: mon0 (1)[c::]:6789 connect error
[ 1442.356852][T17133] ceph: No mds server is up or the cluster is laggy
[ 1442.379090][ T5880] libceph: connect (1)[c::]:6789 error -101
[ 1442.383709][ T5879] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1442.410969][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[ 1443.058445][ T5879] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1443.234166][ T5879] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1443.253639][ T5879] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1444.294586][ T5879] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1444.301241][ T5879] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1444.326547][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1444.345322][ T5879] usb 2-1: config 0 descriptor??
[ 1444.501942][ T5879] usb 2-1: can't set config #0, error -71
[ 1444.510514][ T5879] usb 2-1: USB disconnect, device number 79
[ 1445.378573][T17166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2952'.
[ 1448.615312][T17184] ceph: No mds server is up or the cluster is laggy
[ 1449.059533][T17192] ceph: No mds server is up or the cluster is laggy
[ 1449.066744][ T1206] libceph: connect (1)[c::]:6789 error -101
[ 1449.072953][ T1206] libceph: mon0 (1)[c::]:6789 connect error
[ 1449.427291][T17200] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2960'.
[ 1449.958532][T17206] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1451.951866][T17226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2967'.
[ 1454.024384][T17235] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1454.664020][T17239] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1455.080328][T17241] ceph: No mds server is up or the cluster is laggy
[ 1456.614863][T17250] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2974'.
[ 1457.376823][T17268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2978'.
[ 1459.494477][T17285] ceph: No mds server is up or the cluster is laggy
[ 1459.521433][T13615] libceph: connect (1)[c::]:6789 error -101
[ 1459.552391][T13615] libceph: mon0 (1)[c::]:6789 connect error
[ 1459.564687][T17291] ceph: No mds server is up or the cluster is laggy
[ 1460.959677][ T1206] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER)
[ 1461.042755][T17299] ceph: No mds server is up or the cluster is laggy
[ 1461.467300][T16908] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1461.845044][T16908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1461.873403][T16908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1461.938117][T16908] usb 4-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00
[ 1461.999499][T16908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1462.040079][T16908] usb 4-1: config 0 descriptor??
[ 1465.306931][T16908] usbhid 4-1:0.0: can't add hid device: -71
[ 1465.580119][T16908] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1465.590179][T16908] usb 4-1: USB disconnect, device number 3
[ 1465.848870][ T5880] libceph: connect (1)[c::]:6789 error -101
[ 1465.856525][T17345] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1465.875239][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[ 1465.988027][T17343] ceph: No mds server is up or the cluster is laggy
[ 1466.180482][ T5880] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[ 1466.933801][ T5880] usb 9-1: Using ep0 maxpacket: 8
[ 1466.947253][ T5880] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1466.961967][ T5880] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1466.972111][ T5880] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1466.992468][ T5880] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1467.014173][ T5880] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1467.023477][ T5880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1467.320778][ T5880] usb 9-1: usb_control_msg returned -32
[ 1467.824715][ T5880] usbtmc 9-1:16.0: can't read capabilities
[ 1467.851621][T13615] libceph: connect (1)[c::]:6789 error -101
[ 1467.860676][T17356] ceph: No mds server is up or the cluster is laggy
[ 1467.876652][T13615] libceph: mon0 (1)[c::]:6789 connect error
[ 1467.890305][ T5880] usb 9-1: USB disconnect, device number 28
[ 1468.391332][T17371] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1468.994603][T17374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3007'.
[ 1470.522383][T17376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3005'.
[ 1471.205428][T17378] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[ 1471.227059][T17378] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[ 1471.257657][T17378] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[ 1471.683936][T17378] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[ 1471.889735][T17378] geneve2: entered promiscuous mode
[ 1472.182933][T17378] geneve2: entered allmulticast mode
[ 1473.283757][T17394] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1473.811935][T17397] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1474.188111][T17398] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[ 1474.213685][T17398] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[ 1474.222517][T17398] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[ 1474.420426][T17398] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[ 1475.380466][T17398] geneve2: entered promiscuous mode
[ 1475.432786][T17398] geneve2: entered allmulticast mode
[ 1475.494647][T17406] ceph: No mds server is up or the cluster is laggy
[ 1476.495371][ T1206] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER)
[ 1476.763681][T13615] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1477.023945][T13615] usb 10-1: Using ep0 maxpacket: 8
[ 1477.241220][T13615] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1477.265112][T13615] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1477.287673][T13615] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1478.377828][T13615] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1478.808059][T13615] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1478.843056][T13615] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1478.996423][T13615] usb 10-1: can't set config #16, error -71
[ 1479.258026][T13615] usb 10-1: USB disconnect, device number 10
[ 1479.460541][T17130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1479.478163][T17130] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1479.488521][T17130] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1479.497756][T17130] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1479.523908][T17130] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1479.532488][T17130] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1480.059429][T17435] chnl_net:caif_netlink_parms(): no params data found
[ 1480.179369][T17435] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1480.179569][T17435] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1480.179723][T17435] bridge_slave_0: entered allmulticast mode
[ 1480.180352][T17435] bridge_slave_0: entered promiscuous mode
[ 1480.182012][T17435] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1480.182200][T17435] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1480.182286][T17435] bridge_slave_1: entered allmulticast mode
[ 1480.182898][T17435] bridge_slave_1: entered promiscuous mode
[ 1480.197572][T17435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1480.199044][T17435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1480.216604][T17435] team0: Port device team_slave_0 added
[ 1480.218911][T17435] team0: Port device team_slave_1 added
[ 1480.231954][T17435] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1480.231971][T17435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1480.231989][T17435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1480.233067][T17435] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1480.233078][T17435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1480.233097][T17435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1480.263088][T17435] hsr_slave_0: entered promiscuous mode
[ 1480.263634][T17435] hsr_slave_1: entered promiscuous mode
[ 1480.264252][T17435] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1480.264270][T17435] Cannot create hsr debugfs directory
[ 1480.452448][T17435] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1480.452514][T17435] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1480.613524][T17435] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1480.613768][T17435] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1480.809474][T17435] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1480.809510][T17435] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1481.225463][T17435] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1482.005276][T17435] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1482.009659][T17130] Bluetooth: hci2: command tx timeout
[ 1482.697611][T17458] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3029'.
[ 1483.117547][T17463] usb usb9: usbfs: process 17463 (syz.9.3030) did not claim interface 0 before use
[ 1483.958791][T17435] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1484.000755][T17435] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1484.295050][T17130] Bluetooth: hci2: command tx timeout
[ 1484.740282][T17472] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1484.980200][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.982133][T17435] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1484.986762][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1485.390506][T17435] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1485.672278][T17435] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1485.733504][T17435] 8021q: adding VLAN 0 to HW filter on device team0
[ 1485.782485][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1485.789876][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1485.835679][T17478] ceph: No mds server is up or the cluster is laggy
[ 1485.888940][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1485.896287][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1486.100306][T17482] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1486.333655][T17130] Bluetooth: hci2: command tx timeout
[ 1486.593216][T17435] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1486.623681][T16908] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1486.649536][T17435] veth0_vlan: entered promiscuous mode
[ 1486.680085][T17435] veth1_vlan: entered promiscuous mode
[ 1486.773897][T16908] usb 10-1: Using ep0 maxpacket: 8
[ 1486.785082][T16908] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1486.795226][T16908] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1486.814100][T16908] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1486.838596][T16908] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1486.865207][T16908] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1486.889844][T16908] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1487.096795][T17435] veth0_macvtap: entered promiscuous mode
[ 1487.124695][T16908] usb 10-1: GET_CAPABILITIES returned 19
[ 1487.130351][T16908] usbtmc 10-1:16.0: can't read capabilities
[ 1487.138780][T17435] veth1_macvtap: entered promiscuous mode
[ 1487.190191][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1487.214806][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1487.230837][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1487.241338][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1487.262055][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1487.282876][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1487.310346][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1487.387625][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1487.411668][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1487.431950][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1487.463884][T17435] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1487.494433][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1487.517782][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1487.555425][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1487.596616][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1487.616922][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1487.647825][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1487.668006][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1487.708333][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1487.731902][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1487.760261][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1487.786576][ T5879] usb 10-1: USB disconnect, device number 11
[ 1487.796830][T17435] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1487.860568][T17435] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1487.881054][T17435] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1487.906414][T17435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1487.918956][T17435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1488.400275][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1488.413757][T17130] Bluetooth: hci2: command tx timeout
[ 1488.426133][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1488.437194][ T3452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1488.453498][ T3452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1489.013681][T16908] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 1489.306016][T17499] overlayfs: failed to resolve './file0': -2
[ 1490.063643][T16908] usb 10-1: Using ep0 maxpacket: 32
[ 1490.084444][T16908] usb 10-1: config index 0 descriptor too short (expected 156, got 27)
[ 1490.114057][T16908] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1490.131274][T16908] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1490.151117][T16908] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1490.171060][T16908] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1490.180342][T16908] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1490.200420][T16908] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1490.211426][T16908] usb 10-1: Product: syz
[ 1490.218862][T16908] usb 10-1: Manufacturer: syz
[ 1490.226813][T16908] usb 10-1: SerialNumber: syz
[ 1490.233491][T16908] usb 10-1: config 0 descriptor??
[ 1490.251874][T16908] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1490.272205][T16908] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1491.456183][  T974] usb 10-1: USB disconnect, device number 12
[ 1491.481796][  T974] ldusb 10-1:0.0: LD USB Device #0 now disconnected
[ 1493.367650][T17524] syz.9.3042: attempt to access beyond end of device
[ 1493.367650][T17524] nbd9: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1493.381111][T17524] gfs2: error -5 reading superblock
[ 1494.833787][T16908] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1495.054398][T16908] usb 10-1: Using ep0 maxpacket: 8
[ 1495.063961][T16908] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1495.083830][T16908] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1495.098373][T16908] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1495.108927][T16908] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1495.769556][T16908] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1495.780036][T16908] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1496.212059][T16908] usb 10-1: GET_CAPABILITIES returned 19
[ 1496.224019][T16908] usbtmc 10-1:16.0: can't read capabilities
[ 1497.029429][T16908] usb 10-1: USB disconnect, device number 13
[ 1497.053763][T12801] Bluetooth: hci0: command 0x0406 tx timeout
[ 1499.088735][T17564] overlayfs: failed to resolve './file1': -2
[ 1499.577911][T17561] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[ 1499.582968][T17557] ceph: No mds server is up or the cluster is laggy
[ 1500.723920][T16908] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1500.904985][T16908] usb 3-1: Using ep0 maxpacket: 8
[ 1500.928160][T16908] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1500.950565][T16908] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1500.979901][T16908] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1501.013644][T16908] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1501.047284][T16908] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1501.073396][T16908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1501.378360][T16908] usb 3-1: usb_control_msg returned -32
[ 1501.387393][T16908] usbtmc 3-1:16.0: can't read capabilities
[ 1501.443805][ T1206] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1501.603644][ T1206] usb 2-1: Using ep0 maxpacket: 16
[ 1501.614777][ T1206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1501.635576][ T1206] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1501.649973][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1501.660688][ T1206] usb 2-1: Product: syz
[ 1501.669182][ T1206] usb 2-1: Manufacturer: syz
[ 1501.674916][ T1206] usb 2-1: SerialNumber: syz
[ 1501.694168][   T25] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1501.700569][ T1206] usb 2-1: config 0 descriptor??
[ 1501.717606][ T1206] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1501.743454][ T1206] em28xx 2-1:0.0: DVB interface 0 found: bulk
[ 1501.993905][   T25] usb 10-1: Using ep0 maxpacket: 32
[ 1502.005803][   T25] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1503.083962][   T25] usb 10-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[ 1503.099433][   T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1503.155625][ T1206] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 1503.180116][   T25] usb 10-1: Product: syz
[ 1503.193607][   T25] usb 10-1: Manufacturer: syz
[ 1503.218058][   T25] usb 10-1: SerialNumber: syz
[ 1503.269719][   T25] usb 10-1: config 0 descriptor??
[ 1503.365569][   T25] gspca_main: sunplus-2.14.0 probing 08ca:2060
[ 1503.840627][ T1206] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1504.001249][ T1206] em28xx 2-1:0.0: board has no eeprom
[ 1504.573900][ T1206] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1504.583241][ T1206] em28xx 2-1:0.0: dvb set to bulk mode.
[ 1504.583280][  T974] usb 3-1: USB disconnect, device number 78
[ 1504.606532][T16742] em28xx 2-1:0.0: Binding DVB extension
[ 1504.765027][T17602] overlayfs: missing 'lowerdir'
[ 1504.864486][ T5879] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[ 1504.898971][ T1206] usb 2-1: USB disconnect, device number 80
[ 1504.914355][ T1206] em28xx 2-1:0.0: Disconnecting em28xx
[ 1505.032158][   T25] gspca_sunplus: reg_r err -32
[ 1505.874184][ T5879] usb 9-1: Using ep0 maxpacket: 8
[ 1505.954874][ T5879] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1506.084395][ T5879] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1506.112179][ T5879] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1506.139579][T16742] em28xx 2-1:0.0: Registering input extension
[ 1506.164133][ T5879] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1506.177459][ T1206] em28xx 2-1:0.0: Closing input extension
[ 1506.210092][ T5879] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1506.226103][ T1206] em28xx 2-1:0.0: Freeing device
[ 1506.231583][ T5879] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1506.355940][T17615] syz.1.3065: attempt to access beyond end of device
[ 1506.355940][T17615] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1506.405425][T17615] gfs2: error -5 reading superblock
[ 1506.698849][ T5879] usb 9-1: usb_control_msg returned -32
[ 1506.734197][ T5879] usbtmc 9-1:16.0: can't read capabilities
[ 1506.809399][T17619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3067'.
[ 1508.283891][ T5879] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1508.353719][   T25] sunplus 10-1:0.0: probe with driver sunplus failed with error -32
[ 1508.363436][   T25] usb 10-1: USB disconnect, device number 14
[ 1508.443642][ T5879] usb 4-1: Using ep0 maxpacket: 8
[ 1508.452348][ T5879] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1508.462682][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1508.470879][ T5879] usb 4-1: Product: syz
[ 1508.476408][ T5879] usb 4-1: Manufacturer: syz
[ 1508.481148][ T5879] usb 4-1: SerialNumber: syz
[ 1508.488145][ T5879] usb 4-1: config 0 descriptor??
[ 1508.493974][ T1206] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1508.663721][ T1206] usb 3-1: Using ep0 maxpacket: 8
[ 1508.679362][ T1206] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1508.708300][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1508.716752][ T5879] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1508.725513][ T1206] usb 3-1: Product: syz
[ 1508.729716][ T1206] usb 3-1: Manufacturer: syz
[ 1508.734766][ T1206] usb 3-1: SerialNumber: syz
[ 1508.759063][ T1206] usb 3-1: config 0 descriptor??
[ 1508.989196][ T1206] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1509.033753][T13883] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1509.096406][ T5880] usb 9-1: USB disconnect, device number 29
[ 1509.153326][ T5879] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1509.172922][ T5879] usb 4-1: USB disconnect, device number 4
[ 1509.193634][T13883] usb 10-1: Using ep0 maxpacket: 32
[ 1509.227344][T13883] usb 10-1: config index 0 descriptor too short (expected 156, got 27)
[ 1509.244428][T13883] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1509.280503][T13883] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1509.302219][T13883] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1509.330335][T13883] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1509.350461][T13883] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1509.361057][T13883] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1509.369713][T13883] usb 10-1: Product: syz
[ 1509.376222][T13883] usb 10-1: Manufacturer: syz
[ 1509.380990][T13883] usb 10-1: SerialNumber: syz
[ 1509.388338][T13883] usb 10-1: config 0 descriptor??
[ 1509.395995][T13883] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1510.193492][ T1206] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1510.204448][T13883] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1510.215693][ T1206] usb 3-1: USB disconnect, device number 79
[ 1510.225423][T13883] usb 10-1: USB disconnect, device number 15
[ 1510.232847][T13883] ldusb 10-1:0.0: LD USB Device #0 now disconnected
[ 1510.773750][ T1206] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 1511.025293][ T1206] usb 3-1: Using ep0 maxpacket: 32
[ 1511.163749][T13615] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1511.163834][ T1206] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1511.203304][ T1206] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[ 1511.231335][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1511.304275][ T5879] libceph: connect (1)[c::]:6789 error -101
[ 1511.320778][ T1206] usb 3-1: Product: syz
[ 1511.339082][ T1206] usb 3-1: Manufacturer: syz
[ 1511.356983][T13615] usb 10-1: Using ep0 maxpacket: 16
[ 1511.362558][T17656] ceph: No mds server is up or the cluster is laggy
[ 1511.374296][ T1206] usb 3-1: SerialNumber: syz
[ 1511.380501][T13615] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1511.380652][ T5879] libceph: mon0 (1)[c::]:6789 connect error
[ 1511.419071][ T1206] usb 3-1: config 0 descriptor??
[ 1511.460245][T13615] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1511.460707][ T1206] gspca_main: sunplus-2.14.0 probing 08ca:2060
[ 1511.522620][T13615] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1511.566753][T17661] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3081'.
[ 1511.631517][T13615] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1511.650013][T13615] usb 10-1: Product: syz
[ 1511.664413][T13615] usb 10-1: Manufacturer: syz
[ 1511.677040][T13615] usb 10-1: SerialNumber: syz
[ 1512.335199][T13615] usb 10-1: cannot find UAC_HEADER
[ 1512.454522][T17674] ceph: No mds server is up or the cluster is laggy
[ 1512.837652][T13615] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1512.884651][T13615] usb 10-1: USB disconnect, device number 16
[ 1513.084368][ T1206] gspca_sunplus: reg_r err -32
[ 1515.055859][ T1206] sunplus 3-1:0.0: probe with driver sunplus failed with error -32
[ 1515.257761][ T1206] usb 3-1: USB disconnect, device number 80
[ 1515.333841][   T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1515.639299][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1516.306894][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1516.337292][   T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00
[ 1516.419811][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1516.433155][   T25] usb 4-1: config 0 descriptor??
[ 1519.315306][   T25] usbhid 4-1:0.0: can't add hid device: -71
[ 1519.331960][   T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1519.359678][   T25] usb 4-1: USB disconnect, device number 5
[ 1521.278902][T17731] ceph: No mds server is up or the cluster is laggy
[ 1521.354476][ T1206] libceph: connect (1)[c::]:6789 error -101
[ 1521.488555][ T1206] libceph: mon0 (1)[c::]:6789 connect error
[ 1521.884422][T17742] ceph: No mds server is up or the cluster is laggy
[ 1524.298607][T17764] syz.9.3109: attempt to access beyond end of device
[ 1524.298607][T17764] nbd9: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1524.311889][T17764] gfs2: error -5 reading superblock
[ 1526.685704][T16742] libceph: connect (1)[c::]:6789 error -101
[ 1526.693649][T16742] libceph: mon0 (1)[c::]:6789 connect error
[ 1526.765647][T16742] libceph: connect (1)[c::]:6789 error -101
[ 1526.798062][T16742] libceph: mon0 (1)[c::]:6789 connect error
[ 1526.848014][T17793] ceph: No mds server is up or the cluster is laggy
[ 1527.273669][  T974] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 1527.343694][   T25] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1527.643631][  T974] usb 10-1: Using ep0 maxpacket: 8
[ 1528.184521][   T25] usb 2-1: Using ep0 maxpacket: 16
[ 1529.442052][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1529.457558][  T974] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1529.476559][  T974] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1529.491910][   T25] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1529.520868][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1529.533947][  T974] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1529.551300][   T25] usb 2-1: Product: syz
[ 1529.555817][  T974] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1529.569414][   T25] usb 2-1: Manufacturer: syz
[ 1529.574177][   T25] usb 2-1: SerialNumber: syz
[ 1529.580159][  T974] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1529.590528][   T25] usb 2-1: config 0 descriptor??
[ 1529.598927][   T25] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1529.608489][   T25] em28xx 2-1:0.0: DVB interface 0 found: bulk
[ 1529.614737][  T974] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1530.324250][  T974] usb 10-1: usb_control_msg returned -71
[ 1530.329955][  T974] usbtmc 10-1:16.0: can't read capabilities
[ 1530.364465][   T25] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 1530.374479][  T974] usb 10-1: USB disconnect, device number 17
[ 1530.474270][   T25] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1530.482449][   T25] em28xx 2-1:0.0: board has no eeprom
[ 1530.603617][   T25] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1530.611501][   T25] em28xx 2-1:0.0: dvb set to bulk mode.
[ 1530.635191][ T5836] em28xx 2-1:0.0: Binding DVB extension
[ 1530.854124][   T25] usb 2-1: USB disconnect, device number 81
[ 1531.527062][   T25] em28xx 2-1:0.0: Disconnecting em28xx
[ 1531.554303][ T5836] em28xx 2-1:0.0: Registering input extension
[ 1531.574497][   T25] em28xx 2-1:0.0: Closing input extension
[ 1531.647777][   T25] em28xx 2-1:0.0: Freeing device
[ 1532.489100][T17834] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1532.498413][T17834] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1533.655839][T17840] ceph: No mds server is up or the cluster is laggy
[ 1534.849533][T17859] overlayfs: missing 'workdir'
[ 1536.994078][ T5879] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 1537.274264][ T5879] usb 3-1: Using ep0 maxpacket: 8
[ 1537.538562][ T5879] usb 3-1: config 0 has too many interfaces: 42, using maximum allowed: 32
[ 1537.562222][ T5879] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 42
[ 1537.571851][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1537.582716][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x67, changing to 0x7
[ 1537.625326][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[ 1537.687480][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1537.743703][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1537.813803][ T5879] usb 3-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57
[ 1537.843502][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1537.875613][ T5879] usb 3-1: config 0 descriptor??
[ 1537.883098][ T5879] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected
[ 1537.908981][ T5879] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[ 1538.361053][T17881] 9pnet_virtio: no channels available for device 127.0.0.1
[ 1538.589475][ T5879] usb 3-1: USB disconnect, device number 81
[ 1538.626838][T17882] syz.3.3143: attempt to access beyond end of device
[ 1538.626838][T17882] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1538.640025][T17882] gfs2: error -5 reading superblock
[ 1538.653965][ T5879] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[ 1538.677639][ T5879] kobil_sct 3-1:0.0: device disconnected
[ 1541.884096][T17925] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1541.900412][T16742] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1542.123962][T16742] usb 2-1: Using ep0 maxpacket: 16
[ 1542.347101][T16742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1542.372671][T16742] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1542.399926][T16742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1542.553859][T16742] usb 2-1: Product: syz
[ 1543.250962][T16742] usb 2-1: Manufacturer: syz
[ 1543.352153][T16742] usb 2-1: SerialNumber: syz
[ 1543.359468][T16742] usb 2-1: config 0 descriptor??
[ 1543.367773][T16742] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1543.377213][T16742] em28xx 2-1:0.0: DVB interface 0 found: bulk
[ 1543.517118][  T974] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 1543.683805][  T974] usb 10-1: Using ep0 maxpacket: 8
[ 1543.695690][  T974] usb 10-1: config 0 has too many interfaces: 42, using maximum allowed: 32
[ 1543.713608][  T974] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 42
[ 1543.739597][  T974] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1543.760816][  T974] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x67, changing to 0x7
[ 1543.782879][  T974] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[ 1543.813590][  T974] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1543.833830][  T974] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1543.853632][  T974] usb 10-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57
[ 1543.873125][  T974] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1543.884691][  T974] usb 10-1: config 0 descriptor??
[ 1543.892236][  T974] kobil_sct 10-1:0.0: KOBIL USB smart card terminal converter detected
[ 1543.893754][ T1206] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1543.910995][  T974] usb 10-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[ 1543.998491][T16742] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 1544.073646][ T1206] usb 4-1: Using ep0 maxpacket: 8
[ 1544.088044][ T1206] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1544.105065][ T1206] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1544.130696][ T1206] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1544.160111][ T1206] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1544.190752][ T1206] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1544.213082][ T1206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1544.222861][T13883] usb 10-1: USB disconnect, device number 18
[ 1544.232352][T13883] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[ 1544.264987][T13883] kobil_sct 10-1:0.0: device disconnected
[ 1544.474709][ T1206] usb 4-1: usb_control_msg returned -32
[ 1544.480366][ T1206] usbtmc 4-1:16.0: can't read capabilities
[ 1544.819726][T16742] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1544.849543][T16742] em28xx 2-1:0.0: board has no eeprom
[ 1544.933789][T16742] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1544.948609][T16742] em28xx 2-1:0.0: dvb set to bulk mode.
[ 1544.972373][T13883] em28xx 2-1:0.0: Binding DVB extension
[ 1544.983967][T16742] usb 2-1: USB disconnect, device number 82
[ 1544.998938][T16742] em28xx 2-1:0.0: Disconnecting em28xx
[ 1545.136254][T13883] em28xx 2-1:0.0: Registering input extension
[ 1545.149876][T16742] em28xx 2-1:0.0: Closing input extension
[ 1545.183121][T16742] em28xx 2-1:0.0: Freeing device
[ 1545.326562][T17956] 9pnet_virtio: no channels available for device 127.0.0.1
[ 1545.343730][ T5880] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[ 1545.523719][ T5880] usb 9-1: Using ep0 maxpacket: 16
[ 1545.923768][ T5880] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1545.993243][T17958] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[ 1546.106250][ T5880] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1546.182335][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.189480][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.210922][ T5880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1546.259180][ T5880] usb 9-1: Product: syz
[ 1546.290642][ T5880] usb 9-1: Manufacturer: syz
[ 1546.333798][ T5880] usb 9-1: SerialNumber: syz
[ 1546.517005][ T5880] usb 9-1: config 0 descriptor??
[ 1546.545855][ T5880] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1546.575651][ T5880] em28xx 9-1:0.0: DVB interface 0 found: bulk
[ 1547.181147][T16742] usb 4-1: USB disconnect, device number 6
[ 1547.266707][ T5880] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[ 1547.564913][T17967] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1548.045878][ T5880] em28xx 9-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[ 1548.093764][ T5880] em28xx 9-1:0.0: board has no eeprom
[ 1548.307008][T17975] fuse: Unknown parameter 'grou00000000000000000000'
[ 1548.383596][ T5880] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1548.391543][ T5880] em28xx 9-1:0.0: dvb set to bulk mode.
[ 1548.471946][   T25] em28xx 9-1:0.0: Binding DVB extension
[ 1548.583912][ T5880] usb 9-1: USB disconnect, device number 30
[ 1548.792246][ T5880] em28xx 9-1:0.0: Disconnecting em28xx
[ 1549.212021][   T25] em28xx 9-1:0.0: Registering input extension
[ 1549.223328][ T5880] em28xx 9-1:0.0: Closing input extension
[ 1549.251648][ T5880] em28xx 9-1:0.0: Freeing device
[ 1549.271770][   T29] audit: type=1326 audit(1738943710.333:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17982 comm="syz.1.3174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69ccb8cde9 code=0x0
[ 1549.618862][T17991] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3176'.
[ 1549.628261][T17991] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3176'.
[ 1550.477942][T17994] pim6reg: entered allmulticast mode
[ 1550.699878][T17994] pim6reg: left allmulticast mode
[ 1551.310515][T16742] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[ 1551.476623][T18001] ipt_ECN: cannot use operation on non-tcp rule
[ 1551.771575][T16742] usb 9-1: Using ep0 maxpacket: 8
[ 1551.818096][T16742] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1551.858679][T16742] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1551.912997][T16742] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1551.943475][T16742] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1551.978107][T16742] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1551.993858][T16742] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1552.285609][T16742] usb 9-1: usb_control_msg returned -32
[ 1552.294268][T16742] usbtmc 9-1:16.0: can't read capabilities
[ 1554.137596][T13883] usb 9-1: USB disconnect, device number 31
[ 1554.146115][T18024] 9pnet_virtio: no channels available for device 127.0.0.1
[ 1560.335690][T18065] ipt_ECN: cannot use operation on non-tcp rule
[ 1560.403606][T13883] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1560.683609][T13883] usb 2-1: Using ep0 maxpacket: 8
[ 1561.387265][T13883] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1561.433654][T13883] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1561.444298][T13883] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1561.463951][T13883] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1561.497713][T13883] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1561.532549][T13883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1561.944684][T13883] usb 2-1: usb_control_msg returned -32
[ 1561.952852][T13883] usbtmc 2-1:16.0: can't read capabilities
[ 1563.083428][T18089] syz.2.3202: attempt to access beyond end of device
[ 1563.083428][T18089] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1563.096844][T18089] gfs2: error -5 reading superblock
[ 1563.485689][ T1206] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 1563.588064][T13883] usb 2-1: USB disconnect, device number 83
[ 1563.643703][ T1206] usb 3-1: Using ep0 maxpacket: 32
[ 1563.655246][ T1206] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1563.691509][ T1206] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[ 1563.717144][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1563.745519][ T1206] usb 3-1: Product: syz
[ 1563.750288][ T1206] usb 3-1: Manufacturer: syz
[ 1563.761063][ T1206] usb 3-1: SerialNumber: syz
[ 1563.774476][ T1206] usb 3-1: config 0 descriptor??
[ 1563.789848][ T1206] gspca_main: sunplus-2.14.0 probing 08ca:2060
[ 1563.949457][T13883] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1564.125395][T13883] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1564.146633][T13883] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1564.188747][T13883] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1564.203661][T13883] usb 2-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00
[ 1564.235215][T18096] syz.8.3205: attempt to access beyond end of device
[ 1564.235215][T18096] nbd8: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1564.253812][T18096] gfs2: error -5 reading superblock
[ 1564.289432][T13883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1564.303175][T13883] usb 2-1: config 0 descriptor??
[ 1564.738528][T13883] usbhid 2-1:0.0: can't add hid device: -71
[ 1564.817622][T13883] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1565.184409][T13883] usb 2-1: USB disconnect, device number 84
[ 1566.386833][ T1206] gspca_sunplus: reg_r err -110
[ 1566.391765][ T1206] sunplus 3-1:0.0: probe with driver sunplus failed with error -110
[ 1566.941021][ T5880] usb 3-1: USB disconnect, device number 82
[ 1568.713620][ T5880] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[ 1568.933697][ T5880] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1568.965424][ T5880] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1569.025132][ T5880] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1569.073423][ T5880] usb 3-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00
[ 1569.275098][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1569.450697][ T5880] usb 3-1: config 0 descriptor??
[ 1569.909636][ T5880] usbhid 3-1:0.0: can't add hid device: -71
[ 1569.915906][ T5880] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1569.930340][ T5880] usb 3-1: USB disconnect, device number 83
[ 1570.104092][ T1206] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1570.423582][ T1206] usb 2-1: Using ep0 maxpacket: 8
[ 1570.441138][ T1206] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1570.559505][T18149] tracefs: Unknown parameter '0x000000000000ee00'
[ 1571.200747][ T1206] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1571.212439][ T1206] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1571.223263][ T1206] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1571.246645][ T1206] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1571.263579][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1571.490164][ T1206] usb 2-1: usb_control_msg returned -32
[ 1571.500015][ T1206] usbtmc 2-1:16.0: can't read capabilities
[ 1571.583670][  T974] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[ 1571.754533][  T974] usb 3-1: Using ep0 maxpacket: 32
[ 1571.761422][  T974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1571.786045][  T974] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[ 1571.815733][  T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1571.828059][  T974] usb 3-1: Product: syz
[ 1571.832259][  T974] usb 3-1: Manufacturer: syz
[ 1571.837395][  T974] usb 3-1: SerialNumber: syz
[ 1571.843939][  T974] usb 3-1: config 0 descriptor??
[ 1571.854094][  T974] gspca_main: sunplus-2.14.0 probing 08ca:2060
[ 1573.118543][ T1206] usb 2-1: USB disconnect, device number 85
[ 1573.513262][T18180] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3228'.
[ 1574.243981][  T974] gspca_sunplus: reg_w_1 err -110
[ 1574.249113][  T974] sunplus 3-1:0.0: probe with driver sunplus failed with error -110
[ 1574.472709][  T974] usb 3-1: USB disconnect, device number 84
[ 1575.842096][T18201] process 'syz.2.3235' launched './file1' with NULL argv: empty string added
[ 1576.754049][T18207] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1577.670637][T18208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3237'.
[ 1577.712966][   T29] audit: type=1326 audit(1738943738.783:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18210 comm="syz.9.3241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c58f8cde9 code=0x0
[ 1577.931012][ T1206] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 1578.094420][ T1206] usb 2-1: Using ep0 maxpacket: 8
[ 1578.101705][ T1206] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1578.115072][ T1206] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1578.125468][ T1206] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1578.135582][ T1206] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1578.148714][ T1206] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1578.159771][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1578.303640][   T25] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[ 1578.389026][ T1206] usb 2-1: usb_control_msg returned -32
[ 1578.398215][ T1206] usbtmc 2-1:16.0: can't read capabilities
[ 1578.463594][  T974] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 1578.471233][   T25] usb 3-1: Using ep0 maxpacket: 32
[ 1578.478519][   T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1578.507115][   T25] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[ 1578.516387][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1578.524452][   T25] usb 3-1: Product: syz
[ 1578.528629][   T25] usb 3-1: Manufacturer: syz
[ 1578.533235][   T25] usb 3-1: SerialNumber: syz
[ 1578.555417][   T25] usb 3-1: config 0 descriptor??
[ 1578.568328][   T25] gspca_main: sunplus-2.14.0 probing 08ca:2060
[ 1578.635899][  T974] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1578.653559][  T974] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1578.675584][  T974] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1578.682511][  T974] usb 4-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00
[ 1578.692016][  T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1578.827261][  T974] usb 4-1: config 0 descriptor??
[ 1579.582515][  T974] usbhid 4-1:0.0: can't add hid device: -71
[ 1579.607327][  T974] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1579.836921][T18231] pim6reg: entered allmulticast mode
[ 1579.847416][T18231] pim6reg: left allmulticast mode
[ 1579.938633][  T974] usb 4-1: USB disconnect, device number 7
[ 1580.285698][T18236] tracefs: Unknown parameter 'uid0x000000000000ee00'
[ 1581.518747][   T25] gspca_sunplus: reg_r err -32
[ 1581.542224][   T25] sunplus 3-1:0.0: probe with driver sunplus failed with error -32
[ 1581.634557][T18242] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR
[ 1582.289725][   T25] usb 2-1: USB disconnect, device number 86
[ 1582.494690][ T5836] usb 3-1: USB disconnect, device number 85
[ 1582.648385][T18255] TCP: tcp_parse_options: Illegal window scaling value 175 > 14 received
[ 1582.697963][T18260] netlink: 'syz.3.3254': attribute type 39 has an invalid length.
[ 1584.934804][T18282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3260'.
[ 1586.516472][ T1206] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1587.163637][ T1206] usb 10-1: Using ep0 maxpacket: 8
[ 1587.171107][ T1206] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1587.173851][   T53] bridge_slave_1: left allmulticast mode
[ 1587.181508][ T1206] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 1587.278830][   T53] bridge_slave_1: left promiscuous mode
[ 1587.295952][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1587.296743][ T1206] usb 10-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[ 1587.312811][ T1206] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1587.339010][ T1206] usb 10-1: Product: syz
[ 1587.348515][   T53] bridge_slave_0: left allmulticast mode
[ 1587.351678][ T1206] usb 10-1: Manufacturer: syz
[ 1587.371614][   T53] bridge_slave_0: left promiscuous mode
[ 1587.371626][ T1206] usb 10-1: SerialNumber: syz
[ 1587.384454][ T1206] usb 10-1: config 0 descriptor??
[ 1587.409738][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1587.612527][ T1206] usb 10-1: USB disconnect, device number 19
[ 1588.833723][ T1206] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[ 1588.996445][ T1206] usb 3-1: Using ep0 maxpacket: 8
[ 1589.020060][ T1206] usb 3-1: config 0 has too many interfaces: 42, using maximum allowed: 32
[ 1589.208101][ T1206] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 42
[ 1589.231639][ T1206] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1589.305043][T18314] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3269'.
[ 1590.107772][ T1206] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x67, changing to 0x7
[ 1590.119652][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[ 1590.136340][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1590.161835][ T1206] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1590.316581][   T53] team0: Port device bridge1 removed
[ 1590.325382][ T1206] usb 3-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57
[ 1590.357882][ T1206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1590.416246][ T1206] usb 3-1: config 0 descriptor??
[ 1591.407191][ T1206] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected
[ 1591.893636][ T1206] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[ 1591.992328][   T53] team0: Port device bridge2 removed
[ 1592.327584][T16908] usb 3-1: USB disconnect, device number 86
[ 1592.336265][T16908] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[ 1592.358244][T16908] kobil_sct 3-1:0.0: device disconnected
[ 1592.713215][T17130] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1
[ 1592.720296][T17130] Bluetooth: hci0: unexpected event for opcode 0x203e
[ 1592.973964][T16742] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[ 1593.791537][T16742] usb 3-1: Using ep0 maxpacket: 8
[ 1593.815546][T16742] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1594.026456][T16742] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1594.068998][T16742] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1594.102239][T16742] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1594.112322][T16742] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1594.232841][T16742] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1594.286677][T16742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1594.430017][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1594.457071][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1594.477692][   T53] bond0 (unregistering): Released all slaves
[ 1594.552053][T16742] usb 3-1: GET_CAPABILITIES returned 0
[ 1594.576449][   T53] tipc: Disabling bearer <udp:syz2>
[ 1594.588218][T16742] usbtmc 3-1:16.0: can't read capabilities
[ 1594.840450][T18352] syz.8.3280: attempt to access beyond end of device
[ 1594.840450][T18352] nbd8: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1594.854186][T18352] gfs2: error -5 reading superblock
[ 1594.900892][   T53] tipc: Left network mode
[ 1595.291406][T13883] usb 3-1: USB disconnect, device number 87
[ 1595.831507][   T53] hsr_slave_0: left promiscuous mode
[ 1595.915073][   T53] hsr_slave_1: left promiscuous mode
[ 1595.947447][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1596.118949][T18361] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1596.993633][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1597.046227][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1597.078807][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1597.814555][   T53] veth1_macvtap: left promiscuous mode
[ 1597.820241][   T53] veth0_macvtap: left promiscuous mode
[ 1597.902398][   T53] veth1_vlan: left promiscuous mode
[ 1598.152147][   T53] veth0_vlan: left promiscuous mode
[ 1598.423688][T18375] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1599.344144][  T974] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 1599.584059][  T974] usb 2-1: Using ep0 maxpacket: 16
[ 1599.591076][  T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1599.680231][  T974] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1599.765373][  T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1599.807346][  T974] usb 2-1: Product: syz
[ 1599.832286][  T974] usb 2-1: Manufacturer: syz
[ 1599.871066][  T974] usb 2-1: SerialNumber: syz
[ 1600.051735][  T974] usb 2-1: config 0 descriptor??
[ 1600.139636][  T974] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1600.228511][  T974] em28xx 2-1:0.0: DVB interface 0 found: bulk
[ 1600.749266][  T974] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 1602.101456][  T974] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1602.130072][  T974] em28xx 2-1:0.0: board has no eeprom
[ 1602.211901][  T974] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1602.241166][  T974] em28xx 2-1:0.0: dvb set to bulk mode.
[ 1602.257947][T18324] em28xx 2-1:0.0: Binding DVB extension
[ 1602.274031][  T974] usb 2-1: USB disconnect, device number 87
[ 1602.281147][  T974] em28xx 2-1:0.0: Disconnecting em28xx
[ 1602.384517][T18324] em28xx 2-1:0.0: Registering input extension
[ 1602.393107][  T974] em28xx 2-1:0.0: Closing input extension
[ 1602.430175][  T974] em28xx 2-1:0.0: Freeing device
[ 1603.433802][T18399] syz.9.3292: attempt to access beyond end of device
[ 1603.433802][T18399] nbd9: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1603.447393][T18399] gfs2: error -5 reading superblock
[ 1603.846031][   T53] team0 (unregistering): Port device team_slave_1 removed
[ 1604.048869][   T53] team0 (unregistering): Port device team_slave_0 removed
[ 1604.583700][T12801] Bluetooth: hci2: command 0x0406 tx timeout
[ 1607.634065][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.640408][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1607.953743][T17130] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1
[ 1607.960965][T17130] Bluetooth: hci1: unexpected event for opcode 0x203e
[ 1609.030526][T18438] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3304'.
[ 1610.353146][T18442] pim6reg: entered allmulticast mode
[ 1610.479324][T18444] pim6reg: left allmulticast mode
[ 1610.549749][T18446] netlink: 'syz.2.3307': attribute type 39 has an invalid length.
[ 1611.405789][T18324] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1611.699988][T18463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3312'.
[ 1612.623638][T18324] usb 4-1: Using ep0 maxpacket: 8
[ 1612.632195][T18324] usb 4-1: config 0 has too many interfaces: 42, using maximum allowed: 32
[ 1612.642149][T18324] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 42
[ 1612.663553][T18324] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1612.684464][T18324] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x67, changing to 0x7
[ 1612.718504][T18324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[ 1612.741464][T18324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1612.759774][T18324] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1612.774128][T18324] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57
[ 1612.977316][T18324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1613.004332][T18324] usb 4-1: config 0 descriptor??
[ 1613.015523][T18324] kobil_sct 4-1:0.0: KOBIL USB smart card terminal converter detected
[ 1613.036772][T18324] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[ 1613.053468][T17130] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1
[ 1613.061509][T17130] Bluetooth: hci4: unexpected event for opcode 0x203e
[ 1613.140013][T18476] netlink: 'syz.1.3317': attribute type 39 has an invalid length.
[ 1613.196748][T18478] tipc: Started in network mode
[ 1613.201821][T18478] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[ 1613.211878][T18478] tipc: Enabled bearer <eth:team0>, priority 0
[ 1613.241482][T13615] usb 4-1: USB disconnect, device number 8
[ 1613.250946][T13615] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[ 1613.266538][T13615] kobil_sct 4-1:0.0: device disconnected
[ 1614.308774][T13615] tipc: Node number set to 11578026
[ 1615.125466][T18506] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[ 1615.125466][T18506] The task syz.3.3326 (18506) triggered the difference, watch for misbehavior.
[ 1618.044821][T18523] tipc: Started in network mode
[ 1618.049820][T18523] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[ 1618.103700][T18523] tipc: Enabled bearer <eth:team0>, priority 0
[ 1619.103646][T16908] tipc: Node number set to 11578026
[ 1619.788301][T17130] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1
[ 1619.796810][T17130] Bluetooth: hci4: unexpected event for opcode 0x203e
[ 1619.894105][T18534] veth0_to_batadv: entered promiscuous mode
[ 1619.983935][T18534] veth0_to_batadv: entered allmulticast mode
[ 1620.857856][T18551] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1621.852264][T16742] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 1622.196808][T18324] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 1622.233977][T16742] usb 2-1: Using ep0 maxpacket: 8
[ 1622.242182][T16742] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 1622.250510][T16742] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1622.263568][T16742] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1622.273351][T16742] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1622.298176][T16742] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1622.346411][T16742] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1622.363603][T16742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1622.393641][T18324] usb 10-1: Using ep0 maxpacket: 8
[ 1622.416250][T18324] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1622.445042][T18324] usb 10-1: config 0 has no interfaces?
[ 1622.479150][T18324] usb 10-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[ 1622.498309][T18324] usb 10-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[ 1622.525670][T18324] usb 10-1: Product: syz
[ 1622.539289][T18324] usb 10-1: Manufacturer: syz
[ 1622.569946][T18324] usb 10-1: SerialNumber: syz
[ 1622.643452][T18324] usb 10-1: config 0 descriptor??
[ 1622.691756][T16742] usb 2-1: GET_CAPABILITIES returned 0
[ 1622.702100][T16742] usbtmc 2-1:16.0: can't read capabilities
[ 1622.889547][T18324] usb 2-1: USB disconnect, device number 88
[ 1623.063748][T13615] usb 10-1: USB disconnect, device number 20
[ 1623.083644][T13883] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[ 1623.233637][T13883] usb 9-1: Using ep0 maxpacket: 16
[ 1623.256733][T13883] usb 9-1: config 0 has no interfaces?
[ 1623.268940][T13883] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1623.287318][T13883] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1623.302171][T13883] usb 9-1: Product: syz
[ 1623.311366][T13883] usb 9-1: Manufacturer: syz
[ 1623.316207][T13883] usb 9-1: SerialNumber: syz
[ 1623.324657][T13883] usb 9-1: config 0 descriptor??
[ 1624.020296][T17130] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1
[ 1624.027322][T13883] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1624.035438][T17130] Bluetooth: hci2: unexpected event for opcode 0x203e
[ 1624.209858][T13883] usb 10-1: Using ep0 maxpacket: 32
[ 1624.216790][T13883] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1624.233249][T13883] usb 10-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[ 1624.247293][T13883] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1624.259856][T13883] usb 10-1: Product: syz
[ 1624.264959][T13883] usb 10-1: Manufacturer: syz
[ 1624.270017][T13883] usb 10-1: SerialNumber: syz
[ 1624.282328][T13883] usb 10-1: config 0 descriptor??
[ 1624.300187][T13883] gspca_main: sunplus-2.14.0 probing 08ca:2060
[ 1625.679203][T16742] libceph: connect (1)[c::]:6789 error -101
[ 1625.692582][T16742] libceph: mon0 (1)[c::]:6789 connect error
[ 1625.714636][T18586] ceph: No mds server is up or the cluster is laggy
[ 1626.636932][T13883] gspca_sunplus: reg_r err -110
[ 1626.754632][T13039] usb 9-1: USB disconnect, device number 32
[ 1626.994474][T18613] Bluetooth: MGMT ver 1.23
[ 1627.117906][T16742] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 1627.955555][T16742] usb 2-1: Using ep0 maxpacket: 16
[ 1628.002548][T16742] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1628.013001][T16742] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1628.035394][T16742] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1628.053577][T16742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1628.061774][T16742] usb 2-1: Product: syz
[ 1628.155764][T16742] usb 2-1: Manufacturer: syz
[ 1628.258087][T16742] usb 2-1: SerialNumber: syz
[ 1628.604396][T13883] sunplus 10-1:0.0: probe with driver sunplus failed with error -110
[ 1628.662840][T13883] usb 10-1: USB disconnect, device number 21
[ 1628.976328][T16742] usb 2-1: cannot find UAC_HEADER
[ 1629.031079][T16742] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1629.375334][T16742] usb 2-1: USB disconnect, device number 89
[ 1631.057086][T16742] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[ 1631.419339][T18651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3369'.
[ 1632.663566][T16742] usb 3-1: Using ep0 maxpacket: 32
[ 1632.675957][T16742] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1632.725504][T16742] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[ 1632.754924][T16742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1632.763376][T16742] usb 3-1: Product: syz
[ 1632.795568][T16742] usb 3-1: Manufacturer: syz
[ 1632.800502][T16742] usb 3-1: SerialNumber: syz
[ 1632.832095][T16742] usb 3-1: config 0 descriptor??
[ 1632.854341][T16742] gspca_main: sunplus-2.14.0 probing 08ca:2060
[ 1633.896556][T16742] gspca_sunplus: reg_w_1 err -110
[ 1635.072049][T18672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3376'.
[ 1635.922429][T13883] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1636.093626][T13883] usb 2-1: Using ep0 maxpacket: 8
[ 1636.129623][T13883] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1636.159233][T13883] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1636.554334][T13883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1636.562387][T13883] usb 2-1: Product: syz
[ 1636.566797][T13883] usb 2-1: Manufacturer: syz
[ 1636.571427][T13883] usb 2-1: SerialNumber: syz
[ 1636.604497][T13883] usb 2-1: config 0 descriptor??
[ 1636.823692][T16908] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[ 1636.851624][T16742] sunplus 3-1:0.0: probe with driver sunplus failed with error -110
[ 1636.914052][T16742] usb 3-1: USB disconnect, device number 88
[ 1637.095721][T16908] usb 9-1: Using ep0 maxpacket: 32
[ 1637.109030][T16908] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1637.140157][T16908] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1637.153641][T16908] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1637.164065][T16908] usb 9-1: Product: syz
[ 1637.168560][T16908] usb 9-1: Manufacturer: syz
[ 1637.173595][T16908] usb 9-1: SerialNumber: syz
[ 1637.206883][T16908] usb 9-1: config 0 descriptor??
[ 1637.234148][T18676] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[ 1637.514652][T16908] usb 9-1: USB disconnect, device number 33
[ 1637.645025][T16742] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[ 1637.804910][T16742] usb 3-1: Using ep0 maxpacket: 16
[ 1637.811961][T16742] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1637.822537][T16742] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1637.851107][T16742] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1637.864681][T16742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1637.888067][T16742] usb 3-1: Product: syz
[ 1637.899788][T16742] usb 3-1: Manufacturer: syz
[ 1637.914573][T16742] usb 3-1: SerialNumber: syz
[ 1638.050497][T16908] usb 2-1: USB disconnect, device number 90
[ 1638.184077][T16742] usb 3-1: cannot find UAC_HEADER
[ 1638.208484][T16742] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1638.246783][T16742] usb 3-1: USB disconnect, device number 89
[ 1641.250955][T18726] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1642.442098][T18731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3394'.
[ 1643.195789][T18737] input: syz1 as /devices/virtual/input/input60
[ 1645.686283][T18755] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3403'.
[ 1646.303568][T13883] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 1646.473596][T16742] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[ 1646.482022][T13883] usb 2-1: Using ep0 maxpacket: 8
[ 1646.492575][T13883] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1646.502514][T13883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1646.512327][T13883] usb 2-1: Product: syz
[ 1646.516838][T13883] usb 2-1: Manufacturer: syz
[ 1646.521542][T13883] usb 2-1: SerialNumber: syz
[ 1646.529167][T13883] usb 2-1: config 0 descriptor??
[ 1646.538724][T13883] gspca_main: sq930x-2.14.0 probing 2770:930c
[ 1646.747331][T16742] usb 3-1: config index 0 descriptor too short (expected 1298, got 18)
[ 1646.768466][T16742] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[ 1646.795528][T16742] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1646.874101][T16742] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1646.903136][T16742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1646.939331][T16742] usb 3-1: Product: syz
[ 1646.945905][T13883] gspca_sq930x: ucbus_write failed -71
[ 1646.962707][T16742] usb 3-1: Manufacturer: syz
[ 1646.985881][T16742] usb 3-1: SerialNumber: syz
[ 1647.014483][T16742] usb 3-1: config 0 descriptor??
[ 1647.163696][T13883] gspca_sq930x: Sensor ov9630 not yet treated
[ 1647.169889][T13883] sq930x 2-1:0.0: probe with driver sq930x failed with error -22
[ 1647.208272][T13883] usb 2-1: USB disconnect, device number 91
[ 1647.329246][   T29] audit: type=1326 audit(1738943808.403:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18789 comm="syz.3.3419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e76f8cde9 code=0x0
[ 1647.361029][ T1206] kernel write not supported for file 1186/task/1187/oom_adj (pid: 1206 comm: kworker/0:2)
[ 1647.920468][T16742] usb 3-1: Firmware version (0.0) predates our first public release.
[ 1647.934596][T16742] usb 3-1: Please update to version 0.2 or newer
[ 1647.995094][T16742] usb 3-1: USB disconnect, device number 90
[ 1648.103658][T13039] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1648.123612][T18324] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[ 1648.137006][T18821] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3433'.
[ 1648.146573][T18821] netem: invalid attributes len -16
[ 1648.151807][T18821] netem: change failed
[ 1648.259416][T13039] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1648.274697][T18324] usb 9-1: Using ep0 maxpacket: 32
[ 1648.285176][T13039] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1648.294416][T13039] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1648.302604][T18324] usb 9-1: config 0 has an invalid interface number: 51 but max is 0
[ 1648.310761][T13039] usb 10-1: SerialNumber: syz
[ 1648.311326][T18825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3434'.
[ 1648.316422][T18324] usb 9-1: config 0 has no interface number 0
[ 1648.335693][T18324] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1648.345036][T18324] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1648.353326][T18324] usb 9-1: Product: syz
[ 1648.357632][T18324] usb 9-1: Manufacturer: syz
[ 1648.362340][T18324] usb 9-1: SerialNumber: syz
[ 1648.371807][T18324] usb 9-1: config 0 descriptor??
[ 1648.379843][T18324] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1648.544797][T18829] =======================================================
[ 1648.544797][T18829] WARNING: The mand mount option has been deprecated and
[ 1648.544797][T18829]          and is ignored by this kernel. Remove the mand
[ 1648.544797][T18829]          option from the mount to silence this warning.
[ 1648.544797][T18829] =======================================================
[ 1648.593398][T18324] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1648.623941][T18324] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1648.740900][T13039] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71
[ 1648.761784][T13039] usb 10-1: USB disconnect, device number 22
[ 1648.997281][    C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1649.005449][T13039] usb 9-1: USB disconnect, device number 34
[ 1649.014570][T13039] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1649.040093][T13039] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1649.064219][T13039] quatech2 9-1:0.51: device disconnected
[ 1649.128507][T12801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1649.140377][T12801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1649.150244][T12801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1649.159038][T12801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1649.167635][T12801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1649.176887][T12801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1649.317772][T18835] chnl_net:caif_netlink_parms(): no params data found
[ 1649.343638][T18324] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 1649.387827][T18835] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1649.395782][T18835] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1649.402944][T18835] bridge_slave_0: entered allmulticast mode
[ 1649.410958][T18835] bridge_slave_0: entered promiscuous mode
[ 1649.421678][T18835] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1649.428897][T18835] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1649.436334][T18835] bridge_slave_1: entered allmulticast mode
[ 1649.442971][T18835] bridge_slave_1: entered promiscuous mode
[ 1649.466846][T18835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1649.479048][T18835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1649.506930][T18324] usb 2-1: config 0 has an invalid interface number: 142 but max is 0
[ 1649.517651][T18835] team0: Port device team_slave_0 added
[ 1649.530431][T18324] usb 2-1: config 0 has no interface number 0
[ 1649.540241][T18835] team0: Port device team_slave_1 added
[ 1649.557516][T18324] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=2f.c1
[ 1649.573397][T18324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1649.583617][T13039] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1649.610163][T18324] usb 2-1: Product: syz
[ 1649.623766][T18324] usb 2-1: Manufacturer: syz
[ 1649.628441][T18324] usb 2-1: SerialNumber: syz
[ 1649.639048][T18324] usb 2-1: config 0 descriptor??
[ 1649.646683][T18835] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1649.653791][T18835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1649.679680][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1649.692486][T18835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1649.706742][T18835] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1649.713867][T18835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1649.739777][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1649.745998][T18835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1649.783792][T13039] usb 10-1: Using ep0 maxpacket: 16
[ 1649.816500][T18835] hsr_slave_0: entered promiscuous mode
[ 1649.832342][T18835] hsr_slave_1: entered promiscuous mode
[ 1649.838738][T18835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1649.847057][T18835] Cannot create hsr debugfs directory
[ 1649.899930][T18324] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[ 1649.909770][T18324] gspca_vc032x: reg_w err -71
[ 1649.915042][T18324] gspca_vc032x: I2c Bus Busy Wait 00
[ 1649.920906][T18324] gspca_vc032x: I2c Bus Busy Wait 00
[ 1649.926386][T18324] gspca_vc032x: I2c Bus Busy Wait 00
[ 1649.931936][T18324] gspca_vc032x: I2c Bus Busy Wait 00
[ 1649.933936][T16742] usb 9-1: new full-speed USB device number 35 using dummy_hcd
[ 1649.938210][T18324] gspca_vc032x: I2c Bus Busy Wait 00
[ 1649.952920][T18324] gspca_vc032x: I2c Bus Busy Wait 00
[ 1649.958627][T18324] gspca_vc032x: I2c Bus Busy Wait 00
[ 1649.964357][T18324] gspca_vc032x: I2c Bus Busy Wait 00
[ 1649.970088][T18324] gspca_vc032x: I2c Bus Busy Wait 00
[ 1649.987159][T18324] gspca_vc032x: I2c Bus Busy Wait 00
[ 1649.993157][T18324] gspca_vc032x: I2c Bus Busy Wait 00
[ 1650.007511][T18324] gspca_vc032x: I2c Bus Busy Wait 00
[ 1650.018273][T18324] gspca_vc032x: I2c Bus Busy Wait 00
[ 1650.033531][T18324] gspca_vc032x: I2c Bus Busy Wait 00
[ 1650.041519][T18854] netlink: 'syz.3.3447': attribute type 4 has an invalid length.
[ 1650.043609][T18324] gspca_vc032x: I2c Bus Busy Wait 00
[ 1650.071300][T18324] gspca_vc032x: I2c Bus Busy Wait 00
[ 1650.076768][T18324] gspca_vc032x: I2c Bus Busy Wait 00
[ 1650.082165][T18324] gspca_vc032x: I2c Bus Busy Wait 00
[ 1650.087773][T18324] gspca_vc032x: I2c Bus Busy Wait 00
[ 1650.102154][T18324] gspca_vc032x: Unknown sensor...
[ 1650.113402][T18324] vc032x 2-1:0.142: probe with driver vc032x failed with error -22
[ 1650.127631][T16742] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1650.134227][T18324] usb 2-1: USB disconnect, device number 92
[ 1650.137009][T16742] usb 9-1: not running at top speed; connect to a high speed hub
[ 1650.168407][T16742] usb 9-1: config 4 has an invalid interface number: 116 but max is 0
[ 1650.177651][T16742] usb 9-1: config 4 has no interface number 0
[ 1650.188908][T16742] usb 9-1: config 4 interface 116 has no altsetting 0
[ 1650.211180][T16742] usb 9-1: New USB device found, idVendor=0499, idProduct=101e, bcdDevice=ec.47
[ 1650.220745][T16742] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1650.233094][T16742] usb 9-1: Product: syz
[ 1650.237837][T16742] usb 9-1: Manufacturer: syz
[ 1650.242541][T16742] usb 9-1: SerialNumber: syz
[ 1650.306404][T13039] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1650.328405][T13039] usb 10-1: unable to read config index 0 descriptor/start: -71
[ 1650.346811][T13039] usb 10-1: can't read configurations, error -71
[ 1650.476883][T16742] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 1650.494647][T18862] delete_channel: no stack
[ 1650.500015][T18862] delete_channel: no stack
[ 1650.536788][T16742] snd-usb-audio 9-1:4.116: probe with driver snd-usb-audio failed with error -2
[ 1650.561656][T16742] usb 9-1: USB disconnect, device number 35
[ 1650.909815][T18878] overlayfs: failed to clone upperpath
[ 1650.920121][T18835] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1650.940644][T18835] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1650.955549][T18835] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1650.964507][ T5879] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1650.977794][T18835] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1650.993604][T13039] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 1651.118443][T18835] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1651.149445][T18835] 8021q: adding VLAN 0 to HW filter on device team0
[ 1651.160771][T13039] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1651.185338][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1651.192452][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1651.201315][T13039] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1651.215487][T12801] Bluetooth: hci3: command tx timeout
[ 1651.223447][T13039] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[ 1651.232697][T13039] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1651.266870][ T9284] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1651.274074][ T9284] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1651.302666][T13039] usb 10-1: config 0 descriptor??
[ 1651.313590][ T5879] usb 4-1: Using ep0 maxpacket: 16
[ 1651.320613][ T5879] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1651.330965][ T5879] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1651.342024][ T5879] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1651.374493][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1651.382686][ T5879] usb 4-1: Product: syz
[ 1651.387201][ T5879] usb 4-1: Manufacturer: syz
[ 1651.392074][ T5879] usb 4-1: SerialNumber: syz
[ 1651.393352][T18835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1651.407559][ T5944] usb 9-1: new full-speed USB device number 36 using dummy_hcd
[ 1651.580212][ T5944] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1651.589504][ T5944] usb 9-1: not running at top speed; connect to a high speed hub
[ 1651.591672][T18835] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1651.599147][ T5944] usb 9-1: config 4 has an invalid interface number: 116 but max is 0
[ 1651.612758][ T5944] usb 9-1: config 4 has no interface number 0
[ 1651.622843][ T5944] usb 9-1: config 4 interface 116 has no altsetting 0
[ 1651.656894][ T5944] usb 9-1: New USB device found, idVendor=0499, idProduct=101e, bcdDevice=ec.47
[ 1651.668649][ T5944] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1651.679155][ T5944] usb 9-1: Product: syz
[ 1651.683380][ T5944] usb 9-1: Manufacturer: syz
[ 1651.689078][ T5944] usb 9-1: SerialNumber: syz
[ 1651.731403][T13039] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0
[ 1651.741927][T13039] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0
[ 1651.758709][T13039] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0
[ 1651.769703][T13039] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0
[ 1651.777895][T13039] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0
[ 1651.788404][T13039] playstation 0003:054C:0DF2.0022: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.9-1/input0
[ 1651.828263][ T5879] usb 4-1: cannot find UAC_HEADER
[ 1651.856971][ T5879] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1651.906415][ T5944] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 1651.921293][T13039] playstation 0003:054C:0DF2.0022: Invalid reportID received, expected 9 got 0
[ 1651.970212][T18835] veth0_vlan: entered promiscuous mode
[ 1651.979372][T13039] playstation 0003:054C:0DF2.0022: Failed to retrieve DualSense pairing info: -22
[ 1651.988724][T13039] playstation 0003:054C:0DF2.0022: Failed to get MAC address from DualSense
[ 1652.000052][T13039] playstation 0003:054C:0DF2.0022: Failed to create dualsense.
[ 1652.009632][T18835] veth1_vlan: entered promiscuous mode
[ 1652.017479][ T5944] snd-usb-audio 9-1:4.116: probe with driver snd-usb-audio failed with error -2
[ 1652.028520][T13039] playstation 0003:054C:0DF2.0022: probe with driver playstation failed with error -22
[ 1652.040206][ T5879] usb 4-1: USB disconnect, device number 9
[ 1652.040947][ T5944] usb 9-1: USB disconnect, device number 36
[ 1652.081220][T18835] veth0_macvtap: entered promiscuous mode
[ 1652.092028][T18835] veth1_macvtap: entered promiscuous mode
[ 1652.113388][T18835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1652.133721][T18835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1652.144808][T13039] usb 10-1: USB disconnect, device number 24
[ 1652.156213][T18835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1652.167094][T18835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1652.178010][T18835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1652.192126][T18835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1652.203864][T18835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1652.222986][T18835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1652.240712][T18835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1652.251950][T18835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1652.264377][T18835] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1652.279280][T18835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1652.290092][T18835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1652.300945][T18835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1652.311878][T18835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1652.327128][T18835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1652.341095][T18835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1652.351325][T18835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1652.361801][T18835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1652.372276][T18835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1652.382775][T18835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1652.395841][T18835] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1652.406278][T18835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1652.422659][T18835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1652.431809][T18835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1652.440647][T18835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1652.620177][T12914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1652.645217][T12914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1652.696629][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1652.707156][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1652.728187][T18909] overlayfs: failed to clone upperpath
[ 1652.783570][ T5879] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[ 1652.810068][T18913] loop9: detected capacity change from 0 to 1
[ 1652.850204][T18913] Dev loop9: unable to read RDB block 1
[ 1652.857733][T18913]  loop9: AHDI p2 p3
[ 1652.861680][T18913] loop9: partition table partially beyond EOD, truncated
[ 1652.903789][T18913] loop9: p2 start 1273113715 is beyond EOD, truncated
[ 1652.908110][T18915] 9pnet_fd: Insufficient options for proto=fd
[ 1652.956863][ T5879] usb 9-1: config index 0 descriptor too short (expected 1298, got 18)
[ 1652.967575][ T5879] usb 9-1: config 0 has an invalid interface number: 0 but max is -1
[ 1652.983691][ T5879] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1653.008241][ T5879] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1653.019544][ T5879] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1653.028037][ T5879] usb 9-1: Product: syz
[ 1653.032468][ T5879] usb 9-1: Manufacturer: syz
[ 1653.037389][ T5879] usb 9-1: SerialNumber: syz
[ 1653.053135][ T5879] usb 9-1: config 0 descriptor??
[ 1653.118024][T18921] 9pnet: p9_errstr2errno: server reported unknown error á~zxªüø
[ 1653.204286][ T5944] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 1653.295238][T12801] Bluetooth: hci3: command tx timeout
[ 1653.363682][ T5944] usb 5-1: Using ep0 maxpacket: 8
[ 1653.371397][ T5944] usb 5-1: config 20 has too many interfaces: 69, using maximum allowed: 32
[ 1653.380440][ T5944] usb 5-1: config 20 has 0 interfaces, different from the descriptor's value: 69
[ 1653.392663][ T5944] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1653.401979][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1653.412317][ T5944] usb 5-1: Product: syz
[ 1653.417283][ T5944] usb 5-1: Manufacturer: syz
[ 1653.421904][ T5944] usb 5-1: SerialNumber: syz
[ 1653.471129][ T5879] usb 9-1: Firmware version (0.0) predates our first public release.
[ 1653.481883][ T5879] usb 9-1: Please update to version 0.2 or newer
[ 1653.550900][T18937] overlayfs: failed to clone upperpath
[ 1653.636454][T13883] usb 5-1: USB disconnect, device number 11
[ 1653.644554][T18941] 9pnet_fd: Insufficient options for proto=fd
[ 1653.715252][ T5879] usb 9-1: USB disconnect, device number 37
[ 1653.823693][T13615] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1653.995094][T13615] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1654.013793][T13615] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1654.030394][T13615] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1654.043156][T13615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1654.051650][T13615] usb 4-1: SerialNumber: syz
[ 1654.266820][T13615] usb 4-1: 0:2 : does not exist
[ 1654.292381][T13615] usb 4-1: USB disconnect, device number 10
[ 1654.303709][ T5879] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 1654.351268][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3493'.
[ 1654.361221][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3493'.
[ 1654.382916][T18968] 9pnet_fd: Insufficient options for proto=fd
[ 1654.483741][ T5879] usb 10-1: Using ep0 maxpacket: 32
[ 1654.502937][ T5879] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 1654.532937][ T5879] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1654.556570][ T5879] usb 10-1: Product: syz
[ 1654.572429][ T5879] usb 10-1: Manufacturer: syz
[ 1654.577651][ T5879] usb 10-1: SerialNumber: syz
[ 1654.596241][ T5879] usb 10-1: config 0 descriptor??
[ 1654.612958][ T5879] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 1655.019829][ T5879] gspca_ov534_9: reg_w failed -71
[ 1655.164914][T16742] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1655.327957][T16742] usb 4-1: Using ep0 maxpacket: 32
[ 1655.341723][T16742] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1655.357279][T16742] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1655.369385][T16742] usb 4-1: config 0 descriptor??
[ 1655.374038][T12801] Bluetooth: hci3: command tx timeout
[ 1655.382434][T16742] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1655.464017][ T5879] gspca_ov534_9: Unknown sensor 0000
[ 1655.464116][ T5879] ov534_9 10-1:0.0: probe with driver ov534_9 failed with error -22
[ 1655.501987][ T5879] usb 10-1: USB disconnect, device number 25
[ 1656.104000][ T5879] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[ 1656.270588][ T5879] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1656.279760][ T5879] usb 10-1: config 1 has no interface number 0
[ 1656.286204][ T5879] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1656.297215][ T5879] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1656.307252][ T5879] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1656.318845][ T5879] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1656.328197][ T5879] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1656.337510][ T5879] usb 10-1: Product: syz
[ 1656.342170][ T5879] usb 10-1: Manufacturer: syz
[ 1656.346960][ T5879] usb 10-1: SerialNumber: syz
[ 1656.433593][ T1206] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[ 1656.604003][ T1206] usb 9-1: Using ep0 maxpacket: 32
[ 1656.615805][ T1206] usb 9-1: config 0 has an invalid interface number: 51 but max is 0
[ 1656.627942][ T1206] usb 9-1: config 0 has no interface number 0
[ 1656.634393][ T1206] usb 9-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid maxpacket 4096, setting to 1024
[ 1656.646187][ T1206] usb 9-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1656.659108][ T1206] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1656.668595][ T1206] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1656.676740][ T1206] usb 9-1: Product: syz
[ 1656.680959][ T1206] usb 9-1: Manufacturer: syz
[ 1656.685672][ T1206] usb 9-1: SerialNumber: syz
[ 1656.692983][ T1206] usb 9-1: config 0 descriptor??
[ 1656.701798][ T1206] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1656.918715][    C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1656.948002][ T1206] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1656.977641][ T1206] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1657.160081][ T1206] usb 9-1: USB disconnect, device number 38
[ 1657.170040][ T5879] cdc_ncm 10-1:1.1: bind() failure
[ 1657.175791][ T1206] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1657.191340][ T5879] usb 10-1: USB disconnect, device number 26
[ 1657.205928][ T1206] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1657.219821][ T1206] quatech2 9-1:0.51: device disconnected
[ 1657.514778][ T9284] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1657.613245][ T9284] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1657.785223][ T9284] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1657.877736][T19070] netlink: 'syz.8.3542': attribute type 4 has an invalid length.
[ 1657.966804][ T9284] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1658.014060][T12801] Bluetooth: hci6: command 0x0406 tx timeout
[ 1658.053147][T16742] gspca_vc032x: reg_r err -71
[ 1658.058202][T16742] gspca_vc032x: I2c Bus Busy Wait 00
[ 1658.072730][T16742] gspca_vc032x: I2c Bus Busy Wait 00
[ 1658.082833][T16742] gspca_vc032x: I2c Bus Busy Wait 00
[ 1658.090366][T16742] gspca_vc032x: I2c Bus Busy Wait 00
[ 1658.093780][T13039] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[ 1658.096486][T16742] gspca_vc032x: I2c Bus Busy Wait 00
[ 1658.108898][T16742] gspca_vc032x: I2c Bus Busy Wait 00
[ 1658.124216][T16742] gspca_vc032x: I2c Bus Busy Wait 00
[ 1658.129867][T16742] gspca_vc032x: I2c Bus Busy Wait 00
[ 1658.145556][T16742] gspca_vc032x: I2c Bus Busy Wait 00
[ 1658.154657][T17130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1658.165322][T17130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1658.174094][T17130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1658.184277][T17130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1658.198964][T16742] gspca_vc032x: I2c Bus Busy Wait 00
[ 1658.204530][T17130] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1658.211896][T16742] gspca_vc032x: I2c Bus Busy Wait 00
[ 1658.211970][ T9284] bridge_slave_1: left allmulticast mode
[ 1658.217392][T16742] gspca_vc032x: I2c Bus Busy Wait 00
[ 1658.217407][T16742] gspca_vc032x: I2c Bus Busy Wait 00
[ 1658.217418][T16742] gspca_vc032x: I2c Bus Busy Wait 00
[ 1658.217430][T16742] gspca_vc032x: I2c Bus Busy Wait 00
[ 1658.217442][T16742] gspca_vc032x: I2c Bus Busy Wait 00
[ 1658.217453][T16742] gspca_vc032x: I2c Bus Busy Wait 00
[ 1658.217465][T16742] gspca_vc032x: Unknown sensor...
[ 1658.235030][ T9284] bridge_slave_1: left promiscuous mode
[ 1658.239347][T17130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1658.265896][T13039] usb 10-1: Using ep0 maxpacket: 8
[ 1658.273346][T16742] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[ 1658.287005][ T9284] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1658.295137][T16742] usb 4-1: USB disconnect, device number 11
[ 1658.317383][T13039] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1658.328150][T13039] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1658.328940][ T9284] bridge_slave_0: left allmulticast mode
[ 1658.343356][ T9284] bridge_slave_0: left promiscuous mode
[ 1658.348766][T13039] usb 10-1: Product: syz
[ 1658.349387][ T9284] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1658.353134][T13039] usb 10-1: Manufacturer: syz
[ 1658.367228][T13039] usb 10-1: SerialNumber: syz
[ 1658.376271][T13039] usb 10-1: config 0 descriptor??
[ 1658.423953][   T25] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[ 1658.574084][   T25] usb 9-1: Using ep0 maxpacket: 8
[ 1658.583053][   T25] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1658.616883][T13039] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1658.625519][   T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1658.633782][   T25] usb 9-1: Product: syz
[ 1658.638075][   T25] usb 9-1: Manufacturer: syz
[ 1658.642734][   T25] usb 9-1: SerialNumber: syz
[ 1658.649754][   T25] usb 9-1: config 0 descriptor??
[ 1658.898321][   T25] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1658.898364][T19087] overlayfs: failed to clone upperpath
[ 1659.035102][ T9284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1659.046100][ T9284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1659.057037][ T9284] bond0 (unregistering): Released all slaves
[ 1659.594757][ T9284] hsr_slave_0: left promiscuous mode
[ 1659.611051][ T9284] hsr_slave_1: left promiscuous mode
[ 1659.651126][ T9284] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1659.672398][T12801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1659.682155][T12801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1659.683710][ T9284] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1659.691011][T12801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1659.721612][ T9284] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1659.744278][T12801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1659.752802][ T9284] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1659.760448][T12801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1659.768198][T12801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1659.815987][ T9284] veth1_macvtap: left promiscuous mode
[ 1659.821867][ T9284] veth0_macvtap: left promiscuous mode
[ 1659.828921][ T9284] veth1_vlan: left promiscuous mode
[ 1659.838531][ T9284] veth0_vlan: left promiscuous mode
[ 1660.335633][T12801] Bluetooth: hci3: command tx timeout
[ 1660.363058][ T9284] team0 (unregistering): Port device team_slave_1 removed
[ 1660.415200][ T9284] team0 (unregistering): Port device team_slave_0 removed
[ 1661.017256][T19112] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1661.105827][T19076] chnl_net:caif_netlink_parms(): no params data found
[ 1661.166132][   T25] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1661.194781][   T25] usb 9-1: USB disconnect, device number 39
[ 1661.223742][T19116] 
[ 1661.226094][T19116] ======================================================
[ 1661.233116][T19116] WARNING: possible circular locking dependency detected
[ 1661.240190][T19116] 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 Not tainted
[ 1661.247297][T19116] ------------------------------------------------------
[ 1661.254319][T19116] syz.1.3562/19116 is trying to acquire lock:
[ 1661.260477][T19116] ffffffff8fcadf08 (rtnl_mutex){+.+.}-{4:4}, at: smc_vlan_by_tcpsk+0x399/0x4e0
[ 1661.269497][T19116] 
[ 1661.269497][T19116] but task is already holding lock:
[ 1661.276872][T19116] ffff8880233a0258 (sk_lock-AF_INET6){+.+.}-{0:0}, at: smc_connect+0xb7/0xde0
[ 1661.285763][T19116] 
[ 1661.285763][T19116] which lock already depends on the new lock.
[ 1661.285763][T19116] 
[ 1661.296178][T19116] 
[ 1661.296178][T19116] the existing dependency chain (in reverse order) is:
[ 1661.305204][T19116] 
[ 1661.305204][T19116] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0}:
[ 1661.312949][T19116]        lock_acquire+0x1ed/0x550
[ 1661.318001][T19116]        lock_sock_nested+0x48/0x100
[ 1661.323304][T19116]        do_ipv6_setsockopt+0xbf7/0x3640
[ 1661.328945][T19116]        ipv6_setsockopt+0x5d/0x170
[ 1661.334164][T19116]        do_sock_setsockopt+0x3af/0x720
[ 1661.339727][T19116]        __x64_sys_setsockopt+0x1ee/0x280
[ 1661.345562][T19116]        do_syscall_64+0xf3/0x230
[ 1661.350615][T19116]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1661.357048][T19116] 
[ 1661.357048][T19116] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[ 1661.364290][T19116]        validate_chain+0x18ef/0x5920
[ 1661.369697][T19116]        __lock_acquire+0x1397/0x2100
[ 1661.375184][T19116]        lock_acquire+0x1ed/0x550
[ 1661.380249][T19116]        __mutex_lock+0x19c/0x1010
[ 1661.385383][T19116]        smc_vlan_by_tcpsk+0x399/0x4e0
[ 1661.390853][T19116]        __smc_connect+0x296/0x1910
[ 1661.396067][T19116]        smc_connect+0x868/0xde0
[ 1661.401022][T19116]        __sys_connect+0x288/0x2d0
[ 1661.406143][T19116]        __x64_sys_connect+0x7a/0x90
[ 1661.411444][T19116]        do_syscall_64+0xf3/0x230
[ 1661.416481][T19116]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1661.422913][T19116] 
[ 1661.422913][T19116] other info that might help us debug this:
[ 1661.422913][T19116] 
[ 1661.433153][T19116]  Possible unsafe locking scenario:
[ 1661.433153][T19116] 
[ 1661.440611][T19116]        CPU0                    CPU1
[ 1661.445990][T19116]        ----                    ----
[ 1661.451367][T19116]   lock(sk_lock-AF_INET6);
[ 1661.455886][T19116]                                lock(rtnl_mutex);
[ 1661.462412][T19116]                                lock(sk_lock-AF_INET6);
[ 1661.469457][T19116]   lock(rtnl_mutex);
[ 1661.473447][T19116] 
[ 1661.473447][T19116]  *** DEADLOCK ***
[ 1661.473447][T19116] 
[ 1661.481600][T19116] 1 lock held by syz.1.3562/19116:
[ 1661.486714][T19116]  #0: ffff8880233a0258 (sk_lock-AF_INET6){+.+.}-{0:0}, at: smc_connect+0xb7/0xde0
[ 1661.496079][T19116] 
[ 1661.496079][T19116] stack backtrace:
[ 1661.501989][T19116] CPU: 0 UID: 0 PID: 19116 Comm: syz.1.3562 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0
[ 1661.502012][T19116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1661.502027][T19116] Call Trace:
[ 1661.502036][T19116]  <TASK>
[ 1661.502044][T19116]  dump_stack_lvl+0x241/0x360
[ 1661.502068][T19116]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1661.502089][T19116]  ? __pfx__printk+0x10/0x10
[ 1661.502123][T19116]  print_circular_bug+0x13a/0x1b0
[ 1661.502152][T19116]  check_noncircular+0x36a/0x4a0
[ 1661.502178][T19116]  ? mark_lock+0x9a/0x360
[ 1661.502199][T19116]  ? __pfx_check_noncircular+0x10/0x10
[ 1661.502219][T19116]  ? lockdep_lock+0x123/0x2b0
[ 1661.502235][T19116]  ? __pfx_validate_chain+0x10/0x10
[ 1661.502264][T19116]  validate_chain+0x18ef/0x5920
[ 1661.502301][T19116]  ? __pfx_validate_chain+0x10/0x10
[ 1661.502328][T19116]  ? mark_lock+0x9a/0x360
[ 1661.502350][T19116]  ? __lock_acquire+0x1397/0x2100
[ 1661.502372][T19116]  ? mark_lock+0x9a/0x360
[ 1661.502390][T19116]  __lock_acquire+0x1397/0x2100
[ 1661.502420][T19116]  lock_acquire+0x1ed/0x550
[ 1661.502443][T19116]  ? smc_vlan_by_tcpsk+0x399/0x4e0
[ 1661.502474][T19116]  ? __pfx_lock_acquire+0x10/0x10
[ 1661.502497][T19116]  ? __pfx___might_resched+0x10/0x10
[ 1661.502518][T19116]  ? __lock_acquire+0x1397/0x2100
[ 1661.502539][T19116]  __mutex_lock+0x19c/0x1010
[ 1661.502559][T19116]  ? smc_vlan_by_tcpsk+0x399/0x4e0
[ 1661.502591][T19116]  ? smc_vlan_by_tcpsk+0x399/0x4e0
[ 1661.502615][T19116]  ? __pfx_lock_acquire+0x10/0x10
[ 1661.502637][T19116]  ? __pfx___mutex_lock+0x10/0x10
[ 1661.502656][T19116]  ? __pfx_lock_release+0x10/0x10
[ 1661.502684][T19116]  smc_vlan_by_tcpsk+0x399/0x4e0
[ 1661.502714][T19116]  ? __pfx_smc_vlan_by_tcpsk+0x10/0x10
[ 1661.502742][T19116]  ? __kmalloc_cache_noprof+0x243/0x390
[ 1661.502767][T19116]  ? __smc_connect+0x1c7/0x1910
[ 1661.502797][T19116]  __smc_connect+0x296/0x1910
[ 1661.502819][T19116]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1661.502836][T19116]  smc_connect+0x868/0xde0
[ 1661.502863][T19116]  __sys_connect+0x288/0x2d0
[ 1661.502891][T19116]  ? __pfx___sys_connect+0x10/0x10
[ 1661.502920][T19116]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1661.502941][T19116]  ? do_syscall_64+0x100/0x230
[ 1661.502960][T19116]  __x64_sys_connect+0x7a/0x90
[ 1661.502978][T19116]  do_syscall_64+0xf3/0x230
[ 1661.503002][T19116]  ? clear_bhb_loop+0x35/0x90
[ 1661.503030][T19116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1661.503054][T19116] RIP: 0033:0x7f69ccb8cde9
[ 1661.503076][T19116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1661.503088][T19116] RSP: 002b:00007f69ca9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1661.503102][T19116] RAX: ffffffffffffffda RBX: 00007f69ccda5fa0 RCX: 00007f69ccb8cde9
[ 1661.503112][T19116] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003
[ 1661.503121][T19116] RBP: 00007f69ccc0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1661.503129][T19116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1661.503141][T19116] R13: 0000000000000000 R14: 00007f69ccda5fa0 R15: 00007ffcede2c098
[ 1661.503162][T19116]  </TASK>
[ 1661.872599][T12801] Bluetooth: hci0: command tx timeout
[ 1661.881723][T19076] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1661.888871][T19076] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1661.896083][T19076] bridge_slave_0: entered allmulticast mode
[ 1661.902711][T19076] bridge_slave_0: entered promiscuous mode
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1662.604690][T13039] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1662.672636][T13039] usb 10-1: USB disconnect, device number 27
[ 1662.673545][ T9284] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1662.746785][ T9284] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1662.788462][ T9284] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1662.857420][ T9284] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1662.918789][ T9284] bridge_slave_0: left allmulticast mode
[ 1662.924510][ T9284] bridge_slave_0: left promiscuous mode
[ 1662.930136][ T9284] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1662.938751][ T9284] bridge_slave_1: left allmulticast mode
[ 1662.945371][ T9284] bridge_slave_1: left promiscuous mode
[ 1662.950986][ T9284] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1662.958894][ T9284] bridge_slave_0: left allmulticast mode
[ 1662.964637][ T9284] bridge_slave_0: left promiscuous mode
[ 1662.970246][ T9284] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1663.165436][ T9284] bond0 (unregistering): Released all slaves
[ 1663.173957][ T9284] bond0 (unregistering): Released all slaves
[ 1663.187103][ T9284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1663.196790][ T9284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1663.206390][ T9284] bond0 (unregistering): Released all slaves
[ 1663.270816][ T9284] tipc: Disabling bearer <eth:team0>
[ 1663.284282][ T9284] tipc: Left network mode
[ 1663.368352][ T9284] hsr_slave_0: left promiscuous mode
[ 1663.377320][ T9284] hsr_slave_1: left promiscuous mode
[ 1663.382889][ T9284] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1663.391650][ T9284] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1663.399363][ T9284] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1663.407121][ T9284] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1663.416839][ T9284] veth1_macvtap: left promiscuous mode
[ 1663.422317][ T9284] veth0_macvtap: left promiscuous mode
[ 1663.427889][ T9284] veth1_vlan: left promiscuous mode
[ 1663.433260][ T9284] veth0_vlan: left promiscuous mode
[ 1663.602483][ T9284] team0 (unregistering): Port device team_slave_1 removed
[ 1663.635543][ T9284] team0 (unregistering): Port device team_slave_0 removed
[ 1669.057161][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1669.063532][ T1298] ieee802154 phy1 wpan1: encryption failed: -22